decocms 4.82.2 → 4.82.4

package/dist/server/server.js

@@ -940,7 +940,7 @@ ${Y}`}return $}});var i80=_((_D)=>{var Vg8=_D&&_D.__createBinding||(Object.creat
     CASE WHEN ${C$.ref("meta_json")}::jsonb->'mcp.mesh'->>'verified' = 'true' THEN 1 ELSE 0 END
   ) desc`}class Wx{db;constructor($){this.db=$}async create($){let Z=new Date().toISOString(),G=$._meta??{},X=Gi1(G),Y=KX(X.tags),Q=KX(X.categories),J={id:$.id,organization_id:$.organization_id,title:$.title,description:$.description??null,server_json:JSON.stringify($.server),meta_json:JSON.stringify(G),tags:F60(Y),categories:F60(Q),is_public:$.is_public?1:0,is_unlisted:$.is_unlisted?1:0,created_at:Z,updated_at:Z,created_by:$.created_by??null};await this.db.insertInto("private_registry_item").values(J).execute();let W=await this.findById($.organization_id,$.id);if(!W)throw Error(`Failed to create registry item "${$.id}"`);return W}async findById($,Z){let G=await this.db.selectFrom("private_registry_item").selectAll().where("organization_id","=",$).where("id","=",Z).executeTakeFirst();return G?this.deserialize(G):null}async findByIdOrName($,Z){let G=await this.findById($,Z);if(G)return G;let X=await this.db.selectFrom("private_registry_item").selectAll().where("organization_id","=",$).where("title","=",Z).executeTakeFirst();return X?this.deserialize(X):null}async update($,Z,G){let X=await this.findById($,Z);if(!X)throw Error(`Registry item not found: ${Z}`);let Y=G._meta??X._meta??{},Q=Gi1(Y),J=KX(Q.tags),W=KX(Q.categories),K={updated_at:new Date().toISOString()};if(G.title!==void 0)K.title=G.title;if(G.description!==void 0)K.description=G.description;if(G.server!==void 0)K.server_json=JSON.stringify(G.server);if(G._meta!==void 0)K.meta_json=JSON.stringify(G._meta);if(G._meta!==void 0)K.tags=F60(J),K.categories=F60(W);if(G.is_public!==void 0)K.is_public=G.is_public?1:0;if(G.is_unlisted!==void 0)K.is_unlisted=G.is_unlisted?1:0;await this.db.updateTable("private_registry_item").set(K).where("organization_id","=",$).where("id","=",Z).execute();let w=await this.findById($,Z);if(!w)throw Error(`Registry item not found after update: ${Z}`);return w}async delete($,Z){let G=await this.findById($,Z);if(!G)return null;return await this.db.deleteFrom("private_registry_item").where("organization_id","=",$).where("id","=",Z).execute(),G}async list($,Z={}){let G=this.db.selectFrom("private_registry_item").selectAll().where("organization_id","=",$);if(!Z.includeUnlisted)G=G.where("is_unlisted","=",0);let X=KX(Z.tags);if(X.length>0)G=G.where(H60("tags",X));let Y=KX(Z.categories);if(Y.length>0)G=G.where(H60("categories",Y));if(Z.where)G=G.where(oy0(Z.where));let W=(await this.db.selectFrom(G.as("filtered")).select(C$`count(*)::int`.as("count")).executeTakeFirst())?.count??0;G=G.orderBy(Xi1()).orderBy("created_at","desc");let w=w60(Z.cursor)??Z.offset??0,U=Z.limit??24;G=G.limit(U).offset(w);let H=(await G.execute()).map((D)=>this.deserialize(D)),N=w+U<W,B=N?K60(w+U):void 0;return{items:H,totalCount:W,hasMore:N,nextCursor:B}}async listPublic($,Z={}){let G=this.db.selectFrom("private_registry_item").selectAll().where("organization_id","=",$).where("is_public","=",1).where("is_unlisted","=",0),X=KX(Z.tags);if(X.length>0)G=G.where(H60("tags",X));let Y=KX(Z.categories);if(Y.length>0)G=G.where(H60("categories",Y));if(Z.where)G=G.where(oy0(Z.where));let W=(await this.db.selectFrom(G.as("filtered")).select(C$`count(*)::int`.as("count")).executeTakeFirst())?.count??0;G=G.orderBy(Xi1()).orderBy("created_at","desc");let w=w60(Z.cursor)??Z.offset??0,U=Z.limit??24;G=G.limit(U).offset(w);let H=(await G.execute()).map((D)=>this.deserialize(D)),N=w+U<W,B=N?K60(w+U):void 0;return{items:H,totalCount:W,hasMore:N,nextCursor:B}}async getFilters($,Z){let G=this.db.selectFrom("private_registry_item").select(["tags","categories"]).where("organization_id","=",$);if(Z?.publicOnly)G=G.where("is_public","=",1);if(!Z?.includeUnlisted)G=G.where("is_unlisted","=",0);let X=await G.execute(),Y=new Map,Q=new Map;for(let W of X){for(let K of vD(W.tags))Y.set(K,(Y.get(K)??0)+1);for(let K of vD(W.categories))Q.set(K,(Q.get(K)??0)+1)}let J=(W)=>Array.from(W.entries()).map(([K,w])=>({value:K,count:w})).sort((K,w)=>K.value.localeCompare(w.value));return{tags:J(Y),categories:J(Q)}}async search($,Z={},G){let X=this.db.selectFrom("private_registry_item").select(["id","title","description","meta_json","server_json","tags","categories","is_public","is_unlisted"]).where("organization_id","=",$).orderBy("created_at","desc");if(G?.publicOnly)X=X.where("is_public","=",1);if(!G?.includeUnlisted)X=X.where("is_unlisted","=",0);let Y=await X.execute(),Q=Z.query?.trim().toLowerCase(),J=KX(Z.tags),W=KX(Z.categories),K=Y.filter((E)=>{if(Q){let L=U60(E.server_json,{}),j=U60(E.meta_json,{})?.["mcp.mesh"]?.short_description??"";if(![E.id,E.title,E.description??"",L.name??"",L.description??"",j].join(" ").toLowerCase().includes(Q))return!1}if(J.length>0){let L=KX(vD(E.tags));if(!J.every((z)=>L.includes(z)))return!1}if(W.length>0){let L=KX(vD(E.categories));if(!W.every((z)=>L.includes(z)))return!1}return!0}),U=w60(Z.cursor)??0,F=Z.limit??20,H=K.slice(U,U+F),N=U+F<K.length,B=N?K60(U+F):void 0;return{items:H.map((E)=>({id:E.id,title:E.title,tags:vD(E.tags),categories:vD(E.categories),is_public:E.is_public===1,is_unlisted:E.is_unlisted===1})),totalCount:K.length,hasMore:N,nextCursor:B}}deserialize($){let Z=U60($.server_json,{}),G=U60($.meta_json,{});return{id:$.id,name:typeof Z.name==="string"?Z.name:void 0,title:$.title,description:$.description,_meta:G,server:Z,is_public:$.is_public===1,is_unlisted:$.is_unlisted===1,created_at:$.created_at,updated_at:$.updated_at,...$.created_by?{created_by:$.created_by}:{}}}}var ec8,$u8,Zu8;var ay0=O(()=>{ec8=new Set(["id","title","description","is_public","is_unlisted","created_at","updated_at","created_by"]),$u8=new Set(["is_public","is_unlisted"]),Zu8={_meta:"meta_json",server:"server_json"}});import{randomUUID as Yu8}from"crypto";function Yi1($,Z){if(!$)return Z;try{return JSON.parse($)}catch{return Z}}class Kx{db;constructor($){this.db=$}async createOrUpdate($){let Z=new Date().toISOString(),G=await this.findPendingByRequestedId($.organization_id,$.requested_id);if(G){let J={title:$.title,description:$.description??null,server_json:JSON.stringify($.server),meta_json:$._meta?JSON.stringify($._meta):null,requester_name:$.requester_name??null,requester_email:$.requester_email??null,updated_at:Z};await this.db.updateTable("private_registry_publish_request").set(J).where("organization_id","=",$.organization_id).where("id","=",G.id).execute();let W=await this.findById($.organization_id,G.id);if(!W)throw Error("Failed to update publish request");return W}let X=Yu8(),Y={id:X,organization_id:$.organization_id,requested_id:$.requested_id,status:"pending",title:$.title,description:$.description??null,server_json:JSON.stringify($.server),meta_json:$._meta?JSON.stringify($._meta):null,requester_name:$.requester_name??null,requester_email:$.requester_email??null,reviewer_notes:null,created_at:Z,updated_at:Z};await this.db.insertInto("private_registry_publish_request").values(Y).execute();let Q=await this.findById($.organization_id,X);if(!Q)throw Error("Failed to create publish request");return Q}async findPendingByRequestedId($,Z){let G=await this.db.selectFrom("private_registry_publish_request").selectAll().where("organization_id","=",$).where("requested_id","=",Z).where("status","=","pending").executeTakeFirst();return G?this.deserialize(G):null}async findById($,Z){let G=await this.db.selectFrom("private_registry_publish_request").selectAll().where("organization_id","=",$).where("id","=",Z).executeTakeFirst();return G?this.deserialize(G):null}async list($,Z={}){let G=this.db.selectFrom("private_registry_publish_request").selectAll().where("organization_id","=",$),X=this.db.selectFrom("private_registry_publish_request").select((w)=>w.fn.countAll().as("count")).where("organization_id","=",$);if(Z.status)G=G.where("status","=",Z.status),X=X.where("status","=",Z.status);let Y=await X.executeTakeFirst(),Q=Number(Y?.count??0),J=Z.sortBy??"created_at",W=Z.sortDirection??"desc";if(J==="title")G=G.orderBy("title",W);else G=G.orderBy("created_at",W);return{items:(await G.limit(Z.limit??24).offset(Z.offset??0).execute()).map((w)=>this.deserialize(w)),totalCount:Q}}async updateStatus($,Z,G,X){let Y={status:G,updated_at:new Date().toISOString(),reviewer_notes:X??null};await this.db.updateTable("private_registry_publish_request").set(Y).where("organization_id","=",$).where("id","=",Z).execute();let Q=await this.findById($,Z);if(!Q)throw Error(`Publish request not found: ${Z}`);return Q}async countPending($){let Z=await this.db.selectFrom("private_registry_publish_request").select((G)=>G.fn.countAll().as("count")).where("organization_id","=",$).where("status","=","pending").executeTakeFirst();return Number(Z?.count??0)}async delete($,Z){let G=await this.findById($,Z);if(!G)return null;return await this.db.deleteFrom("private_registry_publish_request").where("organization_id","=",$).where("id","=",Z).execute(),G}deserialize($){return{id:$.id,organization_id:$.organization_id,requested_id:$.requested_id??null,status:$.status,title:$.title,description:$.description,_meta:Yi1($.meta_json,{}),server:Yi1($.server_json,{name:""}),requester_name:$.requester_name,requester_email:$.requester_email,reviewer_notes:$.reviewer_notes,created_at:$.created_at,updated_at:$.updated_at}}}var sy0=()=>{};import{createHash as Qu8,randomBytes as Ju8,randomUUID as Wu8}from"crypto";function Qi1($){return Qu8("sha256").update($).digest("hex")}function Ku8(){return`prk_${Ju8(32).toString("hex")}`}class wx{db;constructor($){this.db=$}async generate($,Z){let G=Wu8(),X=Ku8(),Y=await Qi1(X),Q=X.slice(0,12),J=new Date().toISOString();return await this.db.insertInto("private_registry_publish_api_key").values({id:G,organization_id:$,name:Z,key_hash:Y,prefix:Q,created_at:J}).execute(),{entity:{id:G,organization_id:$,name:Z,prefix:Q,created_at:J},key:X}}async list($){return await this.db.selectFrom("private_registry_publish_api_key").select(["id","organization_id","name","prefix","created_at"]).where("organization_id","=",$).orderBy("created_at","desc").execute()}async revoke($,Z){return(await this.db.deleteFrom("private_registry_publish_api_key").where("organization_id","=",$).where("id","=",Z).execute()).length>0}async validate($,Z){let G=await Qi1(Z),X=await this.db.selectFrom("private_registry_publish_api_key").select(["id"]).where("organization_id","=",$).where("key_hash","=",G).executeTakeFirst();return Boolean(X)}async hasKeys($){let Z=await this.db.selectFrom("private_registry_publish_api_key").select((G)=>G.fn.countAll().as("count")).where("organization_id","=",$).executeTakeFirst();return Number(Z?.count??0)>0}}var ey0=()=>{};import{randomUUID as Ji1}from"crypto";function Wi1($,Z){if(!$)return Z;try{return JSON.parse($)}catch{return Z}}class N60{db;constructor($){this.db=$}async create($){let Z=Ji1(),G=new Date().toISOString(),X={id:Z,organization_id:$.organization_id,status:$.status??"pending",config_snapshot:$.config_snapshot?JSON.stringify($.config_snapshot):null,total_items:$.total_items??0,tested_items:0,passed_items:0,failed_items:0,skipped_items:0,current_item_id:null,started_at:$.started_at??null,finished_at:null,created_at:G};await this.db.insertInto("private_registry_monitor_run").values(X).execute();let Y=await this.findById($.organization_id,Z);if(!Y)throw Error(`Failed to create monitor run ${Z}`);return Y}async findById($,Z){let G=await this.db.selectFrom("private_registry_monitor_run").selectAll().where("organization_id","=",$).where("id","=",Z).executeTakeFirst();return G?this.deserializeRun(G):null}async list($,Z={}){let G=this.db.selectFrom("private_registry_monitor_run").selectAll().where("organization_id","=",$),X=this.db.selectFrom("private_registry_monitor_run").select((W)=>W.fn.countAll().as("count")).where("organization_id","=",$);if(Z.status)G=G.where("status","=",Z.status),X=X.where("status","=",Z.status);let Y=await X.executeTakeFirst(),Q=Number(Y?.count??0);return{items:(await G.orderBy("created_at","desc").limit(Z.limit??24).offset(Z.offset??0).execute()).map((W)=>this.deserializeRun(W)),totalCount:Q}}async update($,Z,G){let X={};if(G.total_items!==void 0)X.total_items=G.total_items;if(G.status!==void 0)X.status=G.status;if(G.tested_items!==void 0)X.tested_items=G.tested_items;if(G.passed_items!==void 0)X.passed_items=G.passed_items;if(G.failed_items!==void 0)X.failed_items=G.failed_items;if(G.skipped_items!==void 0)X.skipped_items=G.skipped_items;if(G.current_item_id!==void 0)X.current_item_id=G.current_item_id;if(G.started_at!==void 0)X.started_at=G.started_at;if(G.finished_at!==void 0)X.finished_at=G.finished_at;await this.db.updateTable("private_registry_monitor_run").set(X).where("organization_id","=",$).where("id","=",Z).execute();let Y=await this.findById($,Z);if(!Y)throw Error(`Monitor run not found: ${Z}`);return Y}deserializeRun($){return{id:$.id,organization_id:$.organization_id,status:$.status,config_snapshot:Wi1($.config_snapshot,null),total_items:Number($.total_items??0),tested_items:Number($.tested_items??0),passed_items:Number($.passed_items??0),failed_items:Number($.failed_items??0),skipped_items:Number($.skipped_items??0),current_item_id:$.current_item_id,started_at:$.started_at,finished_at:$.finished_at,created_at:$.created_at}}}class B60{db;constructor($){this.db=$}async create($){let Z=Ji1(),G=new Date().toISOString(),X={id:Z,run_id:$.run_id,organization_id:$.organization_id,item_id:$.item_id,item_title:$.item_title,status:$.status,error_message:$.error_message??null,connection_ok:$.connection_ok?1:0,tools_listed:$.tools_listed?1:0,tool_results:$.tool_results?JSON.stringify($.tool_results):null,agent_summary:$.agent_summary??null,duration_ms:$.duration_ms??0,action_taken:$.action_taken??"none",tested_at:G};await this.db.insertInto("private_registry_monitor_result").values(X).execute();let Y=await this.findById($.organization_id,Z);if(!Y)throw Error("Failed to create test result");return Y}async findById($,Z){let G=await this.db.selectFrom("private_registry_monitor_result").selectAll().where("organization_id","=",$).where("id","=",Z).executeTakeFirst();return G?this.deserialize(G):null}async listByRun($,Z,G={}){let X=this.db.selectFrom("private_registry_monitor_result").selectAll().where("organization_id","=",$).where("run_id","=",Z),Y=this.db.selectFrom("private_registry_monitor_result").select((K)=>K.fn.countAll().as("count")).where("organization_id","=",$).where("run_id","=",Z);if(G.status)X=X.where("status","=",G.status),Y=Y.where("status","=",G.status);let Q=await Y.executeTakeFirst(),J=Number(Q?.count??0);return{items:(await X.orderBy("tested_at","desc").limit(G.limit??50).offset(G.offset??0).execute()).map((K)=>this.deserialize(K)),totalCount:J}}async update($,Z,G){let X={};if(G.status!==void 0)X.status=G.status;if(G.error_message!==void 0)X.error_message=G.error_message;if(G.connection_ok!==void 0)X.connection_ok=G.connection_ok?1:0;if(G.tools_listed!==void 0)X.tools_listed=G.tools_listed?1:0;if(G.tool_results!==void 0)X.tool_results=JSON.stringify(G.tool_results);if(G.agent_summary!==void 0)X.agent_summary=G.agent_summary;if(G.duration_ms!==void 0)X.duration_ms=G.duration_ms;if(G.action_taken!==void 0)X.action_taken=G.action_taken;await this.db.updateTable("private_registry_monitor_result").set(X).where("organization_id","=",$).where("id","=",Z).execute();let Y=await this.findById($,Z);if(!Y)throw Error(`Monitor result not found: ${Z}`);return Y}deserialize($){return{id:$.id,run_id:$.run_id,organization_id:$.organization_id,item_id:$.item_id,item_title:$.item_title,status:$.status,error_message:$.error_message,connection_ok:$.connection_ok===1,tools_listed:$.tools_listed===1,tool_results:Wi1($.tool_results,[]),agent_summary:$.agent_summary,duration_ms:Number($.duration_ms??0),action_taken:$.action_taken,tested_at:$.tested_at}}}var Ki1=()=>{};import{randomUUID as wu8}from"crypto";class O60{db;constructor($){this.db=$}async findByItemId($,Z){let G=await this.db.selectFrom("private_registry_monitor_connection").selectAll().where("organization_id","=",$).where("item_id","=",Z).executeTakeFirst();return G?this.deserialize(G):null}async list($){return(await this.db.selectFrom("private_registry_monitor_connection").selectAll().where("organization_id","=",$).orderBy("updated_at","desc").execute()).map((G)=>this.deserialize(G))}async findByConnectionId($,Z){let G=await this.db.selectFrom("private_registry_monitor_connection").selectAll().where("organization_id","=",$).where("connection_id","=",Z).executeTakeFirst();return G?this.deserialize(G):null}async upsert($){let Z=await this.findByItemId($.organization_id,$.item_id),G=new Date().toISOString();if(!Z){let Y={id:wu8(),organization_id:$.organization_id,item_id:$.item_id,connection_id:$.connection_id,auth_status:$.auth_status??"none",created_at:G,updated_at:G};await this.db.insertInto("private_registry_monitor_connection").values(Y).execute()}else{let Y={connection_id:$.connection_id,auth_status:$.auth_status??Z.auth_status,updated_at:G};await this.db.updateTable("private_registry_monitor_connection").set(Y).where("organization_id","=",$.organization_id).where("item_id","=",$.item_id).execute()}let X=await this.findByItemId($.organization_id,$.item_id);if(!X)throw Error("Failed to save monitor connection");return X}async updateAuthStatus($,Z,G){return await this.db.updateTable("private_registry_monitor_connection").set({auth_status:G,updated_at:new Date().toISOString()}).where("organization_id","=",$).where("item_id","=",Z).execute(),this.findByItemId($,Z)}deserialize($){return{id:$.id,organization_id:$.organization_id,item_id:$.item_id,connection_id:$.connection_id,auth_status:$.auth_status,created_at:$.created_at,updated_at:$.updated_at}}}var wi1=()=>{};var Ui1=O(()=>{ay0();sy0();ey0();Ki1();wi1()});class $g0{db;constructor($){this.db=$}async listOrgTags($){return(await this.db.selectFrom("organization_tags").selectAll().where("organization_id","=",$).orderBy("name","asc").execute()).map((G)=>this.tagFromDbRow(G))}async getTag($){let Z=await this.db.selectFrom("organization_tags").selectAll().where("id","=",$).executeTakeFirst();return Z?this.tagFromDbRow(Z):null}async getTagByName($,Z){let G=await this.db.selectFrom("organization_tags").selectAll().where("organization_id","=",$).where("name","=",Z).executeTakeFirst();return G?this.tagFromDbRow(G):null}async createTag($,Z){let G=q6("tag"),X=new Date().toISOString();await this.db.insertInto("organization_tags").values({id:G,organization_id:$,name:Z,created_at:X}).onConflict((Q)=>Q.columns(["organization_id","name"]).doNothing()).execute();let Y=await this.getTagByName($,Z);if(!Y)throw Error(`Failed to create or retrieve tag: ${Z}`);return Y}async deleteTag($){await this.db.deleteFrom("organization_tags").where("id","=",$).execute()}async getMemberTags($){return(await this.db.selectFrom("member_tags").innerJoin("organization_tags","organization_tags.id","member_tags.tag_id").select(["organization_tags.id","organization_tags.organization_id","organization_tags.name","organization_tags.created_at"]).where("member_tags.member_id","=",$).orderBy("organization_tags.name","asc").execute()).map((G)=>this.tagFromDbRow(G))}async setMemberTags($,Z){await this.db.transaction().execute(async(G)=>{if(await G.deleteFrom("member_tags").where("member_id","=",$).execute(),Z.length>0){let X=new Date().toISOString();await G.insertInto("member_tags").values(Z.map((Y)=>({id:q6("mtag"),member_id:$,tag_id:Y,created_at:X}))).execute()}})}async addMemberTag($,Z){let G=new Date().toISOString();await this.db.insertInto("member_tags").values({id:q6("mtag"),member_id:$,tag_id:Z,created_at:G}).onConflict((X)=>X.columns(["member_id","tag_id"]).doNothing()).execute()}async removeMemberTag($,Z){await this.db.deleteFrom("member_tags").where("member_id","=",$).where("tag_id","=",Z).execute()}async verifyMemberOrg($,Z){return await this.db.selectFrom("member").select("id").where("id","=",$).where("organizationId","=",Z).executeTakeFirst()!==void 0}async getUserTagsInOrg($,Z){return(await this.db.selectFrom("member").innerJoin("member_tags","member_tags.member_id","member.id").innerJoin("organization_tags","organization_tags.id","member_tags.tag_id").select(["organization_tags.id","organization_tags.organization_id","organization_tags.name","organization_tags.created_at"]).where("member.userId","=",$).where("member.organizationId","=",Z).orderBy("organization_tags.name","asc").execute()).map((X)=>this.tagFromDbRow(X))}async getMembersWithTags($){let Z=await this.db.selectFrom("member").leftJoin("member_tags","member_tags.member_id","member.id").leftJoin("organization_tags","organization_tags.id","member_tags.tag_id").select(["member.id as memberId","organization_tags.name as tagName"]).where("member.organizationId","=",$).execute(),G=new Map;for(let X of Z){if(!G.has(X.memberId))G.set(X.memberId,[]);if(X.tagName)G.get(X.memberId).push(X.tagName)}return G}tagFromDbRow($){return{id:$.id,organizationId:$.organization_id,name:$.name,createdAt:$.created_at}}}var Fi1=O(()=>{RG()});class Zg0{db;constructor($){this.db=$}async findById($,Z){let G=await this.db.selectFrom("user").select(["user.id","user.name","user.email","user.image","user.createdAt","user.updatedAt"]).where("user.id","=",$).where((X)=>X.exists(X.selectFrom("member as m1").innerJoin("member as m2","m1.organizationId","m2.organizationId").select("m1.id").where("m1.userId","=",$).where("m2.userId","=",Z))).executeTakeFirst();if(!G)return null;return{id:G.id,name:G.name,email:G.email,role:"",createdAt:G.createdAt,updatedAt:G.updatedAt,image:G.image??void 0}}}class yD{userId;toolName;boundAuth;role;connectionId;getToolMeta;organizationId;_granted=!1;constructor($,Z,G,X,Y="self",Q,J){this.userId=$;this.toolName=Z;this.boundAuth=G;this.role=X;this.connectionId=Y;this.getToolMeta=Q;this.organizationId=J}setToolName($){this.toolName=$}setOrganizationId($){this.organizationId=$}getOrganizationId(){return this.organizationId}setRole($){this.role=$}getRole(){return this.role}grant(){this._granted=!0}async check(...$){if(this._granted)return;if(this.toolName?.startsWith("MESH_PUBLIC_")){this.grant();return}if(!this.userId&&!this.boundAuth){if(this.getToolMeta&&await this.isToolPublic()){this.grant();return}throw new Ux("Authentication required. Please provide a valid OAuth token or API key.")}let Z=$.length>0?$:this.toolName?[this.toolName]:[];if(Z.length===0)throw new Vw("No resources specified for access check");for(let G of Z)if(await this.checkResource(G)){this.grant();return}throw new Vw(`Access denied to: ${Z.join(", ")}`)}async checkResource($){if(!this.userId&&!this.boundAuth)return!1;return this.boundAuth?.isApiKeyPrincipal?this.checkApiKeyAccess($):this.checkMemberAccess($)}async checkApiKeyAccess($){if(!this.boundAuth)return!1;return this.boundAuth.hasPermission({[this.connectionId]:[$]})}async checkMemberAccess($){if(this.userId&&this.role&&Bb1.has($))return!0;if(this.role==="admin"||this.role==="owner")return!0;if(!this.boundAuth)return!1;return this.boundAuth.hasPermission({[this.connectionId]:[$]},{organizationId:this.organizationId,role:this.role})}async isToolPublic(){if(this.toolName?.startsWith("MESH_PUBLIC_"))return!0;if(!this.getToolMeta)return!1;try{let $=await this.getToolMeta();if(!$)return!1;let G=$[Cy1]?.public_tool;return G===!0||G==="true"}catch{return!1}}granted(){return this._granted}}var Ux,Vw;var gD=O(()=>{gb();Ux=class Ux extends Error{constructor($){super($);this.name="UnauthorizedError"}};Vw=class Vw extends Error{constructor($){super($);this.name="ForbiddenError"}}});function Hi1($){let Z={};for(let G of Object.keys($))Z[G]=["*"];return Z}function kG($){let Z=$?.metadata;if(!Z)return!1;try{return(typeof Z==="string"?JSON.parse(Z):Z).archived===!0}catch{return!1}}function D60($){let Z=xH.get($);if(!Z||Z.state==="CLOSED")return;if(Z.state==="HALF_OPEN"){if(Z.halfOpenInFlight)throw new Fx($,0);Z.halfOpenInFlight=!0;return}let G=Date.now()-Z.lastFailureTime;if(G>=Yx0){Z.state="HALF_OPEN",Z.halfOpenInFlight=!0;return}throw new Fx($,Yx0-G)}function E60($){xH.delete($)}function L60($){let Z=xH.get($);if(!Z){Uu8(),xH.set($,{state:1>=Xx0?"OPEN":"CLOSED",consecutiveFailures:1,lastFailureTime:Date.now(),halfOpenInFlight:!1});return}if(Z.consecutiveFailures++,Z.lastFailureTime=Date.now(),Z.halfOpenInFlight=!1,Z.consecutiveFailures>=Xx0)Z.state="OPEN"}function Uu8(){if(xH.size<l$0)return;let $=null,Z=1/0;for(let[G,X]of xH)if(X.lastFailureTime<Z)Z=X.lastFailureTime,$=G;if($)xH.delete($)}var xH,Fx;var Gg0=O(()=>{B5();xH=new Map;E8.createObservableGauge("mcp_circuit_breaker.circuits",{description:"MCP connection circuits by state (open, half_open)",unit:"{circuits}"}).addCallback(($)=>{let Z=0,G=0;for(let X of xH.values())if(X.state==="OPEN")Z++;else if(X.state==="HALF_OPEN")G++;$.observe(Z,{state:"open"}),$.observe(G,{state:"half_open"})});Fx=class Fx extends Error{cooldownRemainingMs;constructor($,Z){super(`Connection ${$} circuit breaker is open \u2014 downstream server unreachable. `+`Retry in ${Math.ceil(Z/1000)}s.`);this.name="CircuitOpenError",this.cooldownRemainingMs=Z}}});function Hx(...$){if(Bu8)console.log("[mcp-read-cache]",...$)}function Ou8($){return $.kind==="org"?"org":`u:${$.userId}`}function Xg0($){if($===null||typeof $!=="object")return JSON.stringify($)??"null";if(Array.isArray($))return`[${$.map(Xg0).join(",")}]`;return`{${Object.keys($).sort().map((G)=>`${JSON.stringify(G)}:${Xg0($[G])}`).join(",")}}`}class Bi1{config;maxEntries;now;maxTotalBytes;store=new Map;revalidating=new Set;totalBytes=0;constructor($=Fu8,Z=Hu8,G=()=>Date.now(),X=Nu8){this.config=$;this.maxEntries=Z;this.now=G;this.maxTotalBytes=X}stats(){return{entries:this.store.size,bytes:this.totalBytes}}deleteKey($){let Z=this.store.get($);if(Z)this.store.delete($),this.totalBytes-=Z.bytes}key($,Z,G,X){return`${Z}:${Ou8(G)}:${$}:${Xg0(X)}`}storeSet($,Z,G,X){let Y;try{Y=JSON.stringify(Z).length}catch{Hx("SKIP non-serializable",$);return}if(Y>X){Hx("SKIP oversize",$,`${Y}b > cap ${X}b`);return}this.deleteKey($);while(this.store.size>0&&(this.store.size>=this.maxEntries||this.totalBytes+Y>this.maxTotalBytes)){let Q=this.store.keys().next().value;if(Q===void 0)break;this.deleteKey(Q)}this.store.set($,{value:Z,storedAt:G,bytes:Y}),this.totalBytes+=Y}async fetch($){let{type:Z,connectionId:G,scope:X,params:Y,fetchLive:Q,shouldCache:J,onRevalidation:W}=$,K=this.config[Z],w=this.key(Z,G,X,Y),U=this.now(),F=this.store.get(w),H=F?U-F.storedAt:1/0;if(!F||H>K.maxStaleMs){z60.add(1,{type:Z,outcome:"miss"}),Hx(F?"EXPIRED":"MISS",w);let N=await Q();if(J?.(N)??!0)this.storeSet(w,N,this.now(),K.maxValueBytes);else Hx("NOT-CACHED (shouldCache=false)",w);return N}if(this.store.delete(w),this.store.set(w,F),H>K.revalidateAfterMs&&!this.revalidating.has(w)){z60.add(1,{type:Z,outcome:"stale"}),Hx("STALE \u2192 serve + revalidate",w,`age=${H}ms`),this.revalidating.add(w);let N=Q().then((B)=>{if(J?.(B)??!0)this.storeSet(w,B,this.now(),K.maxValueBytes)}).catch(()=>{z60.add(1,{type:Z,outcome:"error"})}).finally(()=>this.revalidating.delete(w));W?.(N)}else z60.add(1,{type:Z,outcome:"hit"}),Hx("HIT",w,`age=${H}ms`);return F.value}invalidate($){let Z=`${$}:`;for(let G of[...this.store.keys()])if(G.startsWith(Z))this.deleteKey(G)}}function Qg0(){return O1().mcpCacheEnabled}function P60(){return Qg0()?Yg0:null}var z60,j60=1024,Ni1,Fu8,Hu8=2000,Nu8,Bu8,Yg0;var A60=O(()=>{B5();F8();z60=E8.createCounter("mcp_read_cache.fetches",{description:"MCP read cache outcomes (hit, stale, miss, error)",unit:"{fetches}"}),Ni1=j60*j60,Fu8={"tools/call":{revalidateAfterMs:30000,maxStaleMs:300000,maxValueBytes:512*j60},"resources/read":{revalidateAfterMs:60000,maxStaleMs:300000,maxValueBytes:4*Ni1},"prompts/get":{revalidateAfterMs:60000,maxStaleMs:300000,maxValueBytes:512*j60}},Nu8=256*Ni1,Bu8=typeof process<"u"&&!!process.env?.MCP_CACHE_DEBUG;Yg0=new Bi1;E8.createObservableGauge("mcp_read_cache.entries",{description:"Current entry count in the per-pod MCP read cache",unit:"{entries}"}).addCallback(($)=>$.observe(Yg0.stats().entries));E8.createObservableGauge("mcp_read_cache.bytes",{description:"Approximate total bytes held in the per-pod MCP read cache",unit:"By"}).addCallback(($)=>$.observe(Yg0.stats().bytes))});function Ei1($){P60()?.invalidate($)}function Nx($){Ei1($);let Z=Jg0?.();if(!Z)return;try{Z.publish(Oi1,Du8.encode(JSON.stringify({connectionId:$,originId:Di1})))}catch(G){console.warn("[McpCacheInvalidation] publish failed (non-critical):",G)}}function Li1($){if(Jg0=$,rl)return;let Z=$();if(!Z)return;rl=Z.subscribe(Oi1),(async()=>{for await(let G of rl)try{let X=JSON.parse(Eu8.decode(G.data));if(X.originId===Di1)continue;Ei1(X.connectionId)}catch{}})().catch(console.error)}function zi1(){rl?.unsubscribe(),rl=null,Jg0=void 0}var Oi1="studio.mcp-cache.invalidate",Di1,Du8,Eu8,Jg0,rl=null;var ol=O(()=>{A60();Di1=crypto.randomUUID(),Du8=new TextEncoder,Eu8=new TextDecoder});function Lu8($,Z,G){let X=Object.keys(G??{}),Y=Z?.required??[],Q=Y.filter((K)=>!X.includes(K)),J=(K)=>{let w=Z?.properties?.[K]?.type;return w?`${K} (${w})`:K};return[`Invalid arguments for "${$}".`,Y.length?`Required: ${Y.map(J).join(", ")}.`:"",`You sent: ${X.length?X.join(", "):"(none)"}.`,Q.length?`Missing required: ${Q.join(", ")}.`:""].filter(Boolean).join(" ")}function ji1($,Z,G,X){if(!($ instanceof S1)||$.code!==v1.InvalidParams)return $;if(!Z)return $;let Y=Lu8(Z,G,X),Q=$.message.replace(/^MCP error -?\d+: /,"");return new S1(v1.InvalidParams,`${Q}
 
-${Y}`,$.data)}var Pi1=O(()=>{E5()});async function zu8($,Z,G){if(!$)return!1;let X=await $.get("tools",Z).catch(()=>null);if(!X)return!1;for(let Y of X)if(typeof Y==="object"&&Y!==null&&Y.name===G)return Y.annotations?.readOnlyHint===!0;return!1}function Wg0(){return{kind:"org"}}function vH($,Z,G,X){let Y=new U9({name:`lazy-${$.id}`,version:"1.0.0"},{capabilities:{},jsonSchemaValidator:z5}),Q=$.metadata?.isDevConnection===!0,J=null;function W(){if(D60($.id),!J)J=o9($,Z,G).then((B)=>{return E60($.id),B}).catch((B)=>{throw J=null,L60($.id),B});return J}let K=(B,D)=>B!==void 0||D!==void 0,w=(B,D,E,L)=>{return async(z,j)=>{if($.connection_type==="VIRTUAL"||Q||!X||K(z,j)){let A=await W();return D(A,z,j)}let P=await KH(B,$.id,async()=>{let A=await W(),M=await D(A);return E(M)},X,(A)=>Z.pendingRevalidations.push(A),WH);return L(P??[])}};Y.listTools=w("tools",(B,D,E)=>B.listTools(D,E),(B)=>B.tools,(B)=>({tools:B})),Y.listResources=w("resources",(B,D,E)=>B.listResources(D,E),(B)=>B.resources,(B)=>({resources:B})),Y.listPrompts=w("prompts",(B,D,E)=>B.listPrompts(D,E),(B)=>B.prompts,(B)=>({prompts:B}));let U=P60(),F=$.connection_type!=="VIRTUAL"&&!Q,H=async(B,D,E)=>{let L=B?.name,z=F&&typeof L==="string"&&await zu8(X,$.id,L);if(U&&z&&!D)return await U.fetch({type:"tools/call",connectionId:$.id,scope:Wg0(),params:{name:L,arguments:B?.arguments},fetchLive:async()=>{return(await W()).callTool(B,D,E)},shouldCache:(A)=>A?.isError!==!0,onRevalidation:(A)=>Z.pendingRevalidations.push(A)});let j=await W();if(U&&F&&!z)try{return await j.callTool(B,D,E)}finally{Nx($.id)}return j.callTool(B,D,E)};Y.callTool=async(B,D,E)=>{try{return await H(B,D,E)}catch(L){let z=B?.name;if(L instanceof S1&&L.code===v1.InvalidParams&&typeof z==="string"&&X){let P=(await X.get("tools",$.id).catch(()=>null))?.find((A)=>typeof A==="object"&&A!==null&&A.name===z);throw ji1(L,z,P?.inputSchema,B?.arguments)}throw L}},Y.getPrompt=async(B,D)=>{if(!U||!F)return(await W()).getPrompt(B,D);return await U.fetch({type:"prompts/get",connectionId:$.id,scope:Wg0(),params:B,fetchLive:async()=>{return(await W()).getPrompt(B,D)},onRevalidation:(L)=>Z.pendingRevalidations.push(L)})},Y.readResource=async(B,D)=>{if(!U||!F){if(process.env?.MCP_CACHE_DEBUG)console.log("[mcp-read-cache] BYPASS (VIRTUAL)",$.id,"resources/read");return(await W()).readResource(B,D)}return await U.fetch({type:"resources/read",connectionId:$.id,scope:Wg0(),params:B,fetchLive:async()=>{return(await W()).readResource(B,D)},onRevalidation:(L)=>Z.pendingRevalidations.push(L)})},Y.listResourceTemplates=async(B,D)=>{return(await W()).listResourceTemplates(B,D)};let N=Y.close.bind(Y);return Y.close=async()=>{if(J){let B=await J.catch(()=>null);if(B)await B.close().catch(()=>{})}await N()},Y}var al=O(()=>{C3();jG();E5();Gg0();sl();ol();UY();A60();Pi1()});function Kg0($){return{client:{callTool:$.callTool.bind($),listTools:$.listTools.bind($)}}}async function ju8($,Z,{superUser:G}){if(!G&&!Z.organization?.id)throw Error("Organization context is required");let X=typeof $==="string"?await Z.storage.connections.findById($,Z.organization?.id):$;if(!X)throw Error("Connection not found");if(Z.organization&&X.organization_id!==Z.organization.id)throw Error("Connection does not belong to the active organization");if(!Z.organization){let w=await Z.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",X.organization_id).executeTakeFirst();Z.organization=w?{id:w.id,slug:w.slug,name:w.name}:{id:X.organization_id}}if(X.status!=="active")throw Error(`Connection inactive: ${X.status}`);let Y=vH(X,Z,G,t5()??void 0),Q=Dw(Y,{name:"mcp-cms-proxy-client",version:"1.0.0"},{capabilities:{tools:{},resources:{},prompts:{}},toolCallTimeoutMs:tb}),{client:J,server:W}=yu();await Q.connect(W);let K=new U9({name:"mcp-cms-proxy-client",version:"1.0.0"},{jsonSchemaValidator:z5});return await K.connect(J),K}async function Ai1($,Z){return ju8($,Z,{superUser:!1})}var wg0=O(()=>{al();UY();R8();C3();jG()});function T60($,Z){if($==="owner")return!0;if($==="admin")return Z!=="owner";return!1}var Bx,DQ;var p3=O(()=>{Bx=["owner","admin","user"],DQ=["owner","admin"]});function Ug0($,Z){for(let[G,X]of Object.entries(Z)){let Y=$[G];if(!Y||Y.length===0){let J=$["*"];if(!J||J.length===0)return!1;if(J.includes("*"))continue;let W=new Set(J);for(let K of X)if(!W.has(K))return!1;continue}if(Y.includes("*"))continue;let Q=new Set(Y);for(let J of X)if(!Q.has(J))return!1}return!0}import{adminAc as Ti1,memberAc as Pu8}from"@decocms/better-auth/plugins/organization/access";function Hg0($){let Z=["*",...$];return{user:{self:[...X$0],...Pu8.statements},admin:{self:Z,...Ti1.statements},owner:{self:Z,...Ti1.statements}}}function Au8($,Z){for(let[G,X]of Object.entries(Z)){let Y=$[G];if(!Y)return!1;for(let Q of X)if(!Y.includes(Q)&&!Y.includes("*"))return!1}return!0}function Ii1($,Z,G){if(!$)return"fallback";if($.includes(","))return"fallback";if(!Bx.includes($))return"fallback";let X=G[$];if(!X)return"fallback";return Au8(X,Z)?"grant":"deny"}function Ri1(){if(!Fg0){let $=Object.values(rO()).flatMap((Z)=>Z.map((G)=>G.name));Fg0=Hg0($)}return Fg0}var Fg0;var Ng0=O(()=>{gb();p3()});var Cw="New chat";function Mi1(){return`<platform>
+${Y}`,$.data)}var Pi1=O(()=>{E5()});async function zu8($,Z,G){if(!$)return!1;let X=await $.get("tools",Z).catch(()=>null);if(!X)return!1;for(let Y of X)if(typeof Y==="object"&&Y!==null&&Y.name===G)return Y.annotations?.readOnlyHint===!0;return!1}function Wg0(){return{kind:"org"}}function vH($,Z,G,X){let Y=new U9({name:`lazy-${$.id}`,version:"1.0.0"},{capabilities:{},jsonSchemaValidator:z5}),Q=$.metadata?.isDevConnection===!0,J=null;function W(){if(D60($.id),!J)J=o9($,Z,G).then((B)=>{return E60($.id),B}).catch((B)=>{throw J=null,L60($.id),B});return J}let K=(B,D)=>B!==void 0||D!==void 0,w=(B,D,E,L)=>{return async(z,j)=>{if($.connection_type==="VIRTUAL"||Q||!X||K(z,j)){let A=await W();return D(A,z,j)}let P=await KH(B,$.id,async()=>{let A=await W(),M=await D(A);return E(M)},X,(A)=>Z.pendingRevalidations.push(A),WH);return L(P??[])}};Y.listTools=w("tools",(B,D,E)=>B.listTools(D,E),(B)=>B.tools,(B)=>({tools:B})),Y.listResources=w("resources",(B,D,E)=>B.listResources(D,E),(B)=>B.resources,(B)=>({resources:B})),Y.listPrompts=w("prompts",(B,D,E)=>B.listPrompts(D,E),(B)=>B.prompts,(B)=>({prompts:B}));let U=P60(),F=$.connection_type!=="VIRTUAL"&&!Q,H=async(B,D,E)=>{let L=B?.name,z=F&&typeof L==="string"&&await zu8(X,$.id,L);if(U&&z&&!D)return await U.fetch({type:"tools/call",connectionId:$.id,scope:Wg0(),params:{name:L,arguments:B?.arguments},fetchLive:async()=>{return(await W()).callTool(B,D,E)},shouldCache:(A)=>A?.isError!==!0,onRevalidation:(A)=>Z.pendingRevalidations.push(A)});let j=await W();if(U&&F&&!z)try{return await j.callTool(B,D,E)}finally{Nx($.id)}return j.callTool(B,D,E)};Y.callTool=async(B,D,E)=>{try{return await H(B,D,E)}catch(L){let z=B?.name;if(L instanceof S1&&L.code===v1.InvalidParams&&typeof z==="string"&&X){let P=(await X.get("tools",$.id).catch(()=>null))?.find((A)=>typeof A==="object"&&A!==null&&A.name===z);throw ji1(L,z,P?.inputSchema,B?.arguments)}throw L}},Y.getPrompt=async(B,D)=>{if(!U||!F)return(await W()).getPrompt(B,D);return await U.fetch({type:"prompts/get",connectionId:$.id,scope:Wg0(),params:B,fetchLive:async()=>{return(await W()).getPrompt(B,D)},onRevalidation:(L)=>Z.pendingRevalidations.push(L)})},Y.readResource=async(B,D)=>{if(!U||!F){if(process.env?.MCP_CACHE_DEBUG)console.log("[mcp-read-cache] BYPASS (VIRTUAL)",$.id,"resources/read");return(await W()).readResource(B,D)}return await U.fetch({type:"resources/read",connectionId:$.id,scope:Wg0(),params:B,fetchLive:async()=>{return(await W()).readResource(B,D)},onRevalidation:(L)=>Z.pendingRevalidations.push(L)})},Y.listResourceTemplates=async(B,D)=>{return(await W()).listResourceTemplates(B,D)};let N=Y.close.bind(Y);return Y.close=async()=>{if(J){let B=await J.catch(()=>null);if(B)await B.close().catch(()=>{})}await N()},Y}var al=O(()=>{C3();jG();E5();Gg0();sl();ol();UY();A60();Pi1()});function Kg0($){return{client:{callTool:$.callTool.bind($),listTools:$.listTools.bind($)}}}async function ju8($,Z,{superUser:G}){if(!G&&!Z.organization?.id)throw Error("Organization context is required");let X=typeof $==="string"?await Z.storage.connections.findById($,Z.organization?.id):$;if(!X)throw Error("Connection not found");if(Z.organization&&X.organization_id!==Z.organization.id)throw Error("Connection does not belong to the active organization");if(!Z.organization){let w=await Z.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",X.organization_id).executeTakeFirst();Z.organization=w?{id:w.id,slug:w.slug,name:w.name}:{id:X.organization_id}}if(X.status!=="active")throw Error(`Connection inactive: ${X.status}`);let Y=vH(X,Z,G,t5()??void 0),Q=Dw(Y,{name:"mcp-cms-proxy-client",version:"1.0.0"},{capabilities:{tools:{},resources:{},prompts:{}},toolCallTimeoutMs:tb}),{client:J,server:W}=yu();await Q.connect(W);let K=new U9({name:"mcp-cms-proxy-client",version:"1.0.0"},{jsonSchemaValidator:z5});return await K.connect(J),K}async function Ai1($,Z){return ju8($,Z,{superUser:!1})}var wg0=O(()=>{al();UY();R8();C3();jG()});function T60($,Z){let G=Array.isArray(Z)?Z:[Z];if(G.length===0)return!1;if($==="owner")return!0;if($==="admin")return G.every((X)=>X!=="owner");return!1}var Bx,DQ;var p3=O(()=>{Bx=["owner","admin","user"],DQ=["owner","admin"]});function Ug0($,Z){for(let[G,X]of Object.entries(Z)){let Y=$[G];if(!Y||Y.length===0){let J=$["*"];if(!J||J.length===0)return!1;if(J.includes("*"))continue;let W=new Set(J);for(let K of X)if(!W.has(K))return!1;continue}if(Y.includes("*"))continue;let Q=new Set(Y);for(let J of X)if(!Q.has(J))return!1}return!0}import{adminAc as Ti1,memberAc as Pu8}from"@decocms/better-auth/plugins/organization/access";function Hg0($){let Z=["*",...$];return{user:{self:[...X$0],...Pu8.statements},admin:{self:Z,...Ti1.statements},owner:{self:Z,...Ti1.statements}}}function Au8($,Z){for(let[G,X]of Object.entries(Z)){let Y=$[G];if(!Y)return!1;for(let Q of X)if(!Y.includes(Q)&&!Y.includes("*"))return!1}return!0}function Ii1($,Z,G){if(!$)return"fallback";if($.includes(","))return"fallback";if(!Bx.includes($))return"fallback";let X=G[$];if(!X)return"fallback";return Au8(X,Z)?"grant":"deny"}function Ri1(){if(!Fg0){let $=Object.values(rO()).flatMap((Z)=>Z.map((G)=>G.name));Fg0=Hg0($)}return Fg0}var Fg0;var Ng0=O(()=>{gb();p3()});var Cw="New chat";function Mi1(){return`<platform>
 You are an AI agent running on Deco CMS \u2014 a control plane for connecting
 AI agents to external services via the Model Context Protocol (MCP).
 
@@ -1142,7 +1142,7 @@ conversation.
 
 `);return new Y50({connections:[$],superUser:G,mcpListCache:t5()??void 0,listTimeoutMs:X?.listTimeoutMs,instructions:Q},Z)}var Xv=O(()=>{R8();UY();JN();Ss1();vs1()});var Qs1={};X6(Qs1,{clientFromConnection:()=>o9});async function o9($,Z,G=!1){if($.connection_type==="VIRTUAL")return gs1($,Z,G);return js1($,Z,G)}var sl=O(()=>{Ps1();Xv()});async function lu0($,Z,G){let X=new AbortController,Y,Q=new Promise((W,K)=>{Y=setTimeout(()=>{X.abort(),K(new cs1($.id,G))},G)}),J=(async()=>{let W=await o9($,Z,!0);try{return(await W.listTools(void 0,{timeout:G,signal:X.signal})).tools}finally{await W.close().catch(()=>{})}})();J.catch(()=>{});try{return await Promise.race([J,Q])}finally{if(Y)clearTimeout(Y)}}var cs1;var us1=O(()=>{sl();cs1=class cs1 extends Error{constructor($,Z){super(`listTools timed out after ${Z}ms for connection ${$}`);this.name="ListToolsTimeoutError"}}});function K50($){return(Z)=>{if(Z instanceof S1&&Z.code===v1.MethodNotFound)return $;throw Z}}var ds1=O(()=>{E5()});function w50($,Z,G){let X=vH($,Z,G,t5()??void 0),Y=Dw(X,{name:"mcp-mesh-enhanced",version:"1.0.0"},{capabilities:Za8,toolCallTimeoutMs:tb});Y.server.setRequestHandler(VF,async()=>{return await X.listResources().catch(K50({resources:[]}))}),Y.server.setRequestHandler(CF,async()=>{return await X.listResourceTemplates().catch(K50({resourceTemplates:[]}))}),Y.server.setRequestHandler(_F,async()=>{return await X.listPrompts().catch(K50({prompts:[]}))});let Q=Y.close.bind(Y);return Y.close=async()=>{await Q(),await X.close().catch(()=>{})},Y}var Za8;var ls1=O(()=>{R8();E5();al();UY();ds1();Za8={tools:{},resources:{},prompts:{}}});var WN=O(()=>{sl();us1();ls1()});function yi($,Z,G){if(Z.some((X)=>X!=="*"&&X.startsWith("SELF::"))&&$.SELF===void 0)$.SELF={value:`${G}_self`}}function gi($,Z){let G=new Map;for(let X of Z){if(X==="*")continue;let[Y,Q]=Y80(X);if(!Ga8.has(Q))continue;let J=Cd(Y,$);if(typeof J!=="object"||J===null||!("value"in J))continue;let W=J.value;if(typeof W!=="string")continue;G.set(`${W}:${Q}`,{targetConnectionId:W,scope:Q})}return[...G.values()]}async function hi($,Z,G,X){for(let Q of Z){if(Q==="*")continue;let[J]=Y80(Q),W=Cd(J,$);if(W===void 0||W===null)throw Error(`Scope references key "${J}" but it's not present in state`)}let Y=Zc1($,Z);for(let Q of Y){if(Q.endsWith("_self"))continue;let J=await X.storage.connections.findById(Q);if(!J||J.organization_id!==G)throw Error(`Referenced connection not found: ${Q}`);try{await X.access.check(Q)}catch(W){throw Error(`Access denied to referenced connection: ${Q}. ${W.message}`)}}}var Ga8;var mu0=O(()=>{ex0();W80();Ga8=new Set([Q80,J80])});import{z as ms1}from"zod";var Xa8,Ya8,iu0;var is1=O(()=>{q4();Y1();F8();UY();WN();mu0();Td();KW();Xa8=ms1.object({data:Mu.describe("Data for the new connection (id is auto-generated if not provided)")}),Ya8=ms1.object({item:aZ.describe("The created connection entity")}),iu0=$0({name:"COLLECTION_CONNECTIONS_CREATE",description:"Create a new MCP connection. Auto-fetches and caches the server's tool list.",annotations:{title:"Create Connection",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Xa8,outputSchema:Ya8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to create connection");let Y={...$.data,organization_id:G.id,created_by:X};if(Y.id){if((await Z.storage.connections.findById(Y.id))?.organization_id===G.id)throw Error("Connection already exists in organization")}if(Y.connection_type==="VIRTUAL"){let F=iO(Y.connection_url);if(!F)throw Error("VIRTUAL connection requires connection_url in format: virtual://$virtual_mcp_id");let H=await Z.storage.virtualMcps.findById(F);if(!H)throw Error(`Virtual MCP not found: ${F}`);if(H.organization_id!==G.id)throw Error("Virtual MCP does not belong to the current organization");Y.connection_url=nO(F)}if(Y.connection_type==="STDIO"&&!O1().localMode)throw Error("STDIO connections are only available in local mode (--local-mode).");let Q=await GH({id:`pending-${Date.now()}`,title:Y.title,connection_type:Y.connection_type,connection_url:Y.connection_url,connection_token:Y.connection_token,connection_headers:Y.connection_headers}).catch(()=>null),J=Q?.tools?.length?Q.tools:null,W=Q?.scopes?.length?Q.scopes:Y.configuration_scopes??null,K=Y.configuration_state??null;if(K&&W?.length)yi(K,W,G.id),await hi(K,W,G.id,Z);let w=await Z.storage.connections.createNew({...Y,tools:null,configuration_state:K,configuration_scopes:W}),U=K&&W?.length?gi(K,W):[];if(U.length>0){let F;try{await Z.storage.connectionCredentialVault.replaceGrantsForSubject({organizationId:G.id,subjectConnectionId:w.id,createdBy:X,grants:U});let{plaintextToken:H,record:N}=await Z.storage.connectionCredentialVault.createOrRotateWorkloadToken({organizationId:G.id,subjectConnectionId:w.id});F=N.id,await(await o9(w,Z,!1)).callTool({name:"ON_MCP_CONFIGURATION",arguments:{state:K,scopes:W,firstRun:!0,vault:{baseUrl:Z.baseUrl,org:G.slug??G.id,subjectConnectionId:w.id,token:H}}})}catch(H){if(F)await Z.storage.connectionCredentialVault.revokeWorkloadToken({organizationId:G.id,subjectConnectionId:w.id,tokenId:F});throw await Z.storage.connections.delete(w.id),H}}if(J)t5()?.set("tools",w.id,J).catch(()=>{});return i1.capture({distinctId:X,event:"connection_created",groups:{organization:G.id},properties:{connection_id:w.id,connection_type:w.connection_type,app_name:w.app_name??null,organization_id:G.id,tools_count:J?.length??0}}),{item:w}}})});import{z as SQ}from"zod/v4";import{z as ns1}from"zod/v4";import{z as U50}from"zod/v4";import{z as CW}from"zod/v4";import{z as Ka8}from"zod/v4";import{z as EE}from"zod/v4";import{z as _W}from"zod/v4";import{z as MZ}from"zod/v4";import{z as ps1}from"zod/v4";import{z as N50}from"zod/v4";import{z as Ca8}from"zod/v4";import{z as ts1}from"zod/v4";import{z as F50}from"zod/v4";import{z as ca8}from"zod/v4";function ci($,Z){if($===Z)return!0;if($==null||Z==null)return $===Z;if(typeof $!==typeof Z)return!1;if(Array.isArray($)&&Array.isArray(Z)){if($.length!==Z.length)return!1;return $.every((G,X)=>ci(G,Z[X]))}if(typeof $==="object"&&typeof Z==="object"){let G=Object.keys($),X=Object.keys(Z);if(G.length!==X.length)return!1;return G.every((Y)=>X.includes(Y)&&ci($[Y],Z[Y]))}return!1}function ka8(){return($)=>{if(!Array.isArray($))return!0;let Z=[];return $.every((G)=>{if(Z.some((Y)=>ci(G,Y)))return!1;return Z.push(G),!0})}}function H50($,Z){return $.safeParse(Z).success}function W7($){if(typeof $==="boolean")return $?SQ.any():SQ.never();let Z={};for(let Y of ma8)Y.apply(Z,$);let G=[];if(Z.string!==!1)G.push(Z.string||SQ.string());if(Z.number!==!1)G.push(Z.number||SQ.number());if(Z.boolean!==!1)G.push(Z.boolean||SQ.boolean());if(Z.null!==!1)G.push(Z.null||SQ.null());if(Z.array!==!1)G.push(Z.array||SQ.array(SQ.any()));if(Z.tuple!==!1&&Z.tuple!==void 0)G.push(Z.tuple);if(Z.object!==!1)if(Z.object)G.push(Z.object);else{let Y=SQ.custom((Q)=>{return typeof Q==="object"&&Q!==null&&!Array.isArray(Q)},"Must be an object, not an array");G.push(Y)}if(Z.file!==!1&&Z.file!==void 0)G.push(Z.file);let X;if(G.length===0)X=SQ.never();else if(G.length===1)X=G[0];else if(!Object.keys($).some((Q)=>Q!=="$schema"&&Q!=="title"&&Q!=="description"))X=SQ.any();else X=SQ.union(G);for(let Y of ia8)X=Y.apply(X,$);return X}var Qa8=class{apply($,Z){if(!Z.type)return;let G=Array.isArray(Z.type)?Z.type:[Z.type],X=new Set(G);if(!X.has("string"))$.string=!1;if(!X.has("number")&&!X.has("integer"))$.number=!1;if(!X.has("boolean"))$.boolean=!1;if(!X.has("null"))$.null=!1;if(!X.has("array"))$.array=!1;if(!X.has("object"))$.object=!1;if(X.has("integer")&&$.number!==!1){let Y=$.number||ns1.number();if(Y instanceof ns1.ZodNumber)$.number=Y.int()}}},Ja8=class{apply($,Z){if(Z.const===void 0)return;let G=Z.const;if($.string=!1,$.number=!1,$.boolean=!1,$.null=!1,$.array=!1,$.object=!1,typeof G==="string")$.string=U50.literal(G);else if(typeof G==="number")$.number=U50.literal(G);else if(typeof G==="boolean")$.boolean=U50.literal(G);else if(G===null)$.null=U50.null();else if(Array.isArray(G))$.array=void 0;else if(typeof G==="object")$.object=void 0}},Wa8=class{apply($,Z){if(!Z.enum)return;if(Z.enum.length===0){if(!Z.type)$.string=!1,$.number=!1,$.boolean=!1,$.null=!1,$.array=!1,$.object=!1;return}let G={string:Z.enum.filter((X)=>typeof X==="string"),number:Z.enum.filter((X)=>typeof X==="number"),boolean:Z.enum.filter((X)=>typeof X==="boolean"),null:Z.enum.filter((X)=>X===null),array:Z.enum.filter((X)=>Array.isArray(X)),object:Z.enum.filter((X)=>typeof X==="object"&&X!==null&&!Array.isArray(X))};$.string=this.createTypeSchema(G.string,"string"),$.number=this.createTypeSchema(G.number,"number"),$.boolean=this.createTypeSchema(G.boolean,"boolean"),$.null=G.null.length>0?CW.null():!1,$.array=G.array.length>0?void 0:!1,$.object=G.object.length>0?void 0:!1}createTypeSchema($,Z){if($.length===0)return!1;if($.length===1)return CW.literal($[0]);if(Z==="string")return CW.enum($);if(Z==="number"){let[G,X,...Y]=$;return CW.union([CW.literal(G),CW.literal(X),...Y.map((Q)=>CW.literal(Q))])}if(Z==="boolean")return CW.union([CW.literal(!0),CW.literal(!1)]);return!1}},wa8=class{apply($,Z){let G=Z;if(G.type==="string"&&G.format==="binary"&&G.contentEncoding==="binary"){let X=Ka8.file();if(G.minLength!==void 0)X=X.min(G.minLength);if(G.maxLength!==void 0)X=X.max(G.maxLength);if(G.contentMediaType!==void 0)X=X.mime(G.contentMediaType);$.file=X,$.string=!1}}},Ua8=class{apply($,Z){let G=Z;if(Z.type===void 0&&(G.minLength!==void 0||G.maxLength!==void 0||G.pattern!==void 0)){if($.string===void 0)$.string=EE.string()}}},Fa8=class{apply($,Z){let G=Z;if(G.minLength===void 0)return;if($.string!==!1){let X=$.string||EE.string();if(X instanceof EE.ZodString)$.string=X.refine((Y)=>{return Array.from(Y).length>=G.minLength},{message:`String must be at least ${G.minLength} characters long`})}}},Ha8=class{apply($,Z){let G=Z;if(G.maxLength===void 0)return;if($.string!==!1){let X=$.string||EE.string();if(X instanceof EE.ZodString)$.string=X.refine((Y)=>{return Array.from(Y).length<=G.maxLength},{message:`String must be at most ${G.maxLength} characters long`})}}},Na8=class{apply($,Z){let G=Z;if(!G.pattern)return;if($.string!==!1){let X=$.string||EE.string();if(X instanceof EE.ZodString){let Y=new RegExp(G.pattern);$.string=X.regex(Y)}}}},Ba8=class{apply($,Z){let G=Z;if(G.minimum===void 0)return;if($.number!==!1){let X=$.number||_W.number();if(X instanceof _W.ZodNumber)$.number=X.min(G.minimum)}}},Oa8=class{apply($,Z){let G=Z;if(G.maximum===void 0)return;if($.number!==!1){let X=$.number||_W.number();if(X instanceof _W.ZodNumber)$.number=X.max(G.maximum)}}},Da8=class{apply($,Z){let G=Z;if(G.exclusiveMinimum===void 0)return;if($.number!==!1){let X=$.number||_W.number();if(X instanceof _W.ZodNumber)if(typeof G.exclusiveMinimum==="number")$.number=X.gt(G.exclusiveMinimum);else $.number=!1}}},Ea8=class{apply($,Z){let G=Z;if(G.exclusiveMaximum===void 0)return;if($.number!==!1){let X=$.number||_W.number();if(X instanceof _W.ZodNumber)if(typeof G.exclusiveMaximum==="number")$.number=X.lt(G.exclusiveMaximum);else $.number=!1}}},La8=class{apply($,Z){let G=Z;if(G.multipleOf===void 0)return;if($.number!==!1){let X=$.number||_W.number();if(X instanceof _W.ZodNumber)$.number=X.refine((Y)=>{if(G.multipleOf===0)return!1;let Q=Y/G.multipleOf,J=Math.round(Q),W=Math.min(Math.abs(Y)*Number.EPSILON*10,Math.abs(G.multipleOf)*Number.EPSILON*10);return Math.abs(Q-J)<=W/Math.abs(G.multipleOf)},{message:`Must be a multiple of ${G.multipleOf}`})}}},za8=class{apply($,Z){let G=Z;if(Z.type===void 0&&(G.minItems!==void 0||G.maxItems!==void 0||G.items!==void 0||G.prefixItems!==void 0)){if($.array===void 0)$.array=MZ.array(MZ.any())}}},ja8=class{apply($,Z){let G=Z;if(G.minItems===void 0)return;if($.array!==!1)$.array=($.array||MZ.array(MZ.any())).min(G.minItems)}},Pa8=class{apply($,Z){let G=Z;if(G.maxItems===void 0)return;if($.array!==!1)$.array=($.array||MZ.array(MZ.any())).max(G.maxItems)}},Aa8=class{apply($,Z){let G=Z;if($.array===!1)return;if(Array.isArray(G.items))$.array=$.array||MZ.array(MZ.any());else if(G.items&&typeof G.items!=="boolean"&&!G.prefixItems){let X=W7(G.items),Y=MZ.array(X);if($.array&&$.array instanceof MZ.ZodArray){let Q=$.array._def;if(Q.checks)Q.checks.forEach((J)=>{if(J._zod&&J._zod.def){let W=J._zod.def;if(W.check==="min_length"&&W.minimum!==void 0)Y=Y.min(W.minimum);else if(W.check==="max_length"&&W.maximum!==void 0)Y=Y.max(W.maximum)}})}$.array=Y}else if(typeof G.items==="boolean"&&G.items===!1)if(!G.prefixItems)$.array=MZ.array(MZ.any()).max(0);else $.array=$.array||MZ.array(MZ.any());else if(typeof G.items==="boolean"&&G.items===!0)$.array=$.array||MZ.array(MZ.any());else if(G.prefixItems)$.array=$.array||MZ.array(MZ.any())}},Ta8=class{apply($,Z){if(Z.type!=="array")return;let G=Z;if(!Array.isArray(G.items))return;if($.array===!1)return;let X=G.items.map((Q)=>W7(Q)),Y;if(X.length===0)Y=ps1.tuple([]);else Y=ps1.tuple(X);if(G.minItems!==void 0&&G.minItems>X.length)Y=!1;if(G.maxItems!==void 0&&G.maxItems<X.length)Y=!1;$.tuple=Y,$.array=!1}},Ia8=class{apply($,Z){let G=Z;if($.object===!1)return;if(G.properties||G.required||G.additionalProperties!==void 0)$.object=$.object||N50.object({}).passthrough()}},Ra8=class{apply($,Z){let G=Z;if(Z.type===void 0&&(G.maxProperties!==void 0||G.minProperties!==void 0)){if($.object===void 0)$.object=N50.object({}).passthrough()}}},qa8=class{apply($,Z){let G=Z;if(G.maxProperties===void 0)return;if($.object!==!1){let X=$.object||N50.object({}).passthrough();$.object=X.refine((Y)=>Object.keys(Y).length<=G.maxProperties,{message:`Object must have at most ${G.maxProperties} properties`})}}},Ma8=class{apply($,Z){let G=Z;if(G.minProperties===void 0)return;if($.object!==!1){let X=$.object||N50.object({}).passthrough();$.object=X.refine((Y)=>Object.keys(Y).length>=G.minProperties,{message:`Object must have at least ${G.minProperties} properties`})}}},Sa8=class{apply($,Z){if(!Z.not)return $;let G=W7(Z.not);return $.refine((X)=>!H50(G,X),{message:"Value must not match the 'not' schema"})}},Va8=class{apply($,Z){if(Z.uniqueItems!==!0)return $;return $.refine(ka8(),{message:"Array items must be unique"})}},_a8=class{apply($,Z){if(!Z.allOf||Z.allOf.length===0)return $;return Z.allOf.map((X)=>W7(X)).reduce((X,Y)=>Ca8.intersection(X,Y),$)}},ba8=class{apply($,Z){if(!Z.anyOf||Z.anyOf.length===0)return $;let G=Z.anyOf.length===1?W7(Z.anyOf[0]):ts1.union([W7(Z.anyOf[0]),W7(Z.anyOf[1]),...Z.anyOf.slice(2).map((X)=>W7(X))]);return ts1.intersection($,G)}},fa8=class{apply($,Z){if(!Z.oneOf||Z.oneOf.length===0)return $;let G=Z.oneOf.map((X)=>W7(X));return $.refine((X)=>{let Y=0;for(let Q of G)if(Q.safeParse(X).success){if(Y++,Y>1)return!1}return Y===1},{message:"Value must match exactly one of the oneOf schemas"})}},xa8=class{apply($,Z){let G=Z;if(G.prefixItems&&Array.isArray(G.prefixItems)){let Y=G.prefixItems.map((Q)=>W7(Q));return $.refine((Q)=>{if(!Array.isArray(Q))return!0;for(let J=0;J<Math.min(Q.length,Y.length);J++)if(!H50(Y[J],Q[J]))return!1;if(Q.length>Y.length){if(typeof G.items==="boolean"&&G.items===!1)return!1;else if(G.items&&typeof G.items==="object"&&!Array.isArray(G.items)){let J=W7(G.items);for(let W=Y.length;W<Q.length;W++)if(!H50(J,Q[W]))return!1}}return!0},{message:"Array does not match prefixItems schema"})}return $}},va8=class{apply($,Z){let G=Z;if(!G.properties&&!G.required&&G.additionalProperties!==!1)return $;if($ instanceof F50.ZodObject||$ instanceof F50.ZodRecord){let X={};if(G.properties){for(let[Y,Q]of Object.entries(G.properties))if(Q!==void 0)X[Y]=W7(Q)}if(G.required&&Array.isArray(G.required)){let Y=new Set(G.required);for(let Q of Object.keys(X))if(!Y.has(Q))X[Q]=X[Q].optional()}else for(let Y of Object.keys(X))X[Y]=X[Y].optional();if(G.additionalProperties===!1)return F50.object(X);else return F50.object(X).passthrough()}return $.refine((X)=>{if(typeof X!=="object"||X===null||Array.isArray(X))return!0;if(G.properties){for(let[Y,Q]of Object.entries(G.properties))if(Q!==void 0){if(Object.getOwnPropertyDescriptor(X,Y)!==void 0){if(!W7(Q).safeParse(X[Y]).success)return!1}}}if(G.required&&Array.isArray(G.required)){for(let Y of G.required)if(Object.getOwnPropertyDescriptor(X,Y)===void 0)return!1}if(G.additionalProperties===!1&&G.properties){let Y=new Set(Object.keys(G.properties));for(let Q in X)if(!Y.has(Q))return!1}return!0},{message:"Object constraints validation failed"})}},ya8=class{apply($,Z){if(!Z.enum||Z.enum.length===0)return $;let G=Z.enum.filter((X)=>Array.isArray(X)||typeof X==="object"&&X!==null);if(G.length===0)return $;return $.refine((X)=>{if(typeof X!=="object"||X===null)return!0;return G.some((Y)=>ci(X,Y))},{message:"Value must match one of the enum values"})}},ga8=class{apply($,Z){if(Z.const===void 0)return $;let G=Z.const;if(typeof G!=="object"||G===null)return $;return $.refine((X)=>ci(X,G),{message:"Value must equal the const value"})}},ha8=class{apply($,Z){if(Z.description)$=$.describe(Z.description);return $}},ua8=class{apply($,Z){var G;let X=Z;if(!((G=X.required)==null?void 0:G.includes("__proto__"))||Z.type!==void 0)return $;return ca8.any().refine((Y)=>this.validateRequired(Y,X.required),{message:"Missing required properties"})}validateRequired($,Z){if(typeof $!=="object"||$===null||Array.isArray($))return!0;return Z.every((G)=>Object.prototype.hasOwnProperty.call($,G))}},da8=class{apply($,Z){var G;let X=Z;if(X.contains===void 0)return $;let Y=W7(X.contains),Q=(G=X.minContains)!=null?G:1,J=X.maxContains;return $.refine((W)=>{if(!Array.isArray(W))return!0;let K=0;for(let w of W)if(H50(Y,w))K++;if(K<Q)return!1;if(J!==void 0&&K>J)return!1;return!0},{message:"Array must contain required items matching the schema"})}},la8=class{apply($,Z){let{default:G}=Z;if(G===void 0)return $;if(!$.safeParse(G).success)return $;return $.default(G)}},ma8,ia8;var rs1=O(()=>{ma8=[new Ja8,new Wa8,new Qa8,new wa8,new Ua8,new za8,new Ra8,new Fa8,new Ha8,new Na8,new Ba8,new Oa8,new Da8,new Ea8,new La8,new Ta8,new ja8,new Pa8,new Aa8,new qa8,new Ma8,new Ia8],ia8=[new ua8,new ya8,new ga8,new _a8,new ba8,new fa8,new xa8,new va8,new da8,new Sa8,new Va8,new la8,new ha8]});class nu0{constructor($){this._url=$}start(){if(this._socket)throw Error("WebSocketClientTransport already started! If using Client class, note that connect() calls start() automatically.");return new Promise(($,Z)=>{this._socket=new WebSocket(this._url,na8),this._socket.onerror=(G)=>{let X="error"in G?G.error:Error(`WebSocket error: ${JSON.stringify(G)}`);Z(X),this.onerror?.(X)},this._socket.onopen=()=>{$()},this._socket.onclose=()=>{this.onclose?.()},this._socket.onmessage=(G)=>{let X;try{X=QY.parse(JSON.parse(G.data))}catch(Y){this.onerror?.(Y);return}this.onmessage?.(X)}})}async close(){this._socket?.close()}send($){return new Promise((Z,G)=>{if(!this._socket){G(Error("Not connected"));return}this._socket?.send(JSON.stringify($)),Z()})}}var na8="mcp";var os1=O(()=>{E5()});function pa8($){let Z=$;if(!Z||typeof Z!=="object"||!("method"in Z))return null;switch(Z.method){case"initialize":{let G=Z?.params?.protocolVersion;if(!G)return null;return{type:"emit",message:{result:{protocolVersion:G,capabilities:{tools:{}},serverInfo:{name:"deco-chat-server",version:"1.0.0"}},jsonrpc:Z.jsonrpc??"2.0",id:Z.id}}}case"notifications/roots/list_changed":case"notifications/initialized":case"notifications/cancelled":case"notifications/progress":return{type:"suppress"};default:return null}}var B50;var pu0=O(()=>{mO();B50=class B50 extends _3{constructor($,Z){super($,Z)}send($,Z){let G=pa8($);if(G?.type==="emit")return this.onmessage?.(G.message),Promise.resolve();if(G?.type==="suppress")return Promise.resolve();return super.send($,Z)}}});var as1,ss1=async($,Z,G)=>{let X=ta8($.connection,Z,G);if(!X)throw Error("Unknown MCP connection type");let Y=new as1({name:$?.name??"MCP Client",version:"1.0.0"});return await Y.connect(X),{client:Y}},ta8=($,Z,G)=>{if($.type==="Websocket")return new nu0(new URL($.url));if($.type!=="SSE"&&$.type!=="HTTP")return null;let Y={...$.token?{authorization:`Bearer ${$.token}`}:{},...G??{},..."headers"in $?$.headers||{}:{}};if($.type==="SSE"){let Q={requestInit:{headers:Y,signal:Z}};if($.token)Q.eventSourceInit={fetch:(J,W)=>{return fetch(J,{...W,headers:{...Y,Accept:"text/event-stream"},signal:Z})}};return new Rw(new URL($.url),Q)}return new B50(new URL($.url),{requestInit:{headers:Y,signal:Z,credentials:"include"}})};var es1=O(()=>{C3();Pd();os1();E5();jG();pu0();as1=class as1 extends U9{constructor($,Z){super($,{jsonSchemaValidator:z5,...Z})}async listTools($,Z){return await this.request({method:"tools/list",params:$},rc,Z)}}});function Ge1($){let Z=(G)=>{if("connection"in $)return ss1({connection:$.connection},void 0,G);return $.client};return new Proxy({},{get(G,X){if(X==="toJSON")return null;if(typeof X!=="string")throw Error("Name must be a string");if(X==="listTools")return W;async function Y(K,w=X){let U=$?.debugId?.(),F=U?{"x-trace-debug-id":U}:void 0,{client:H}=await Z(F),{structuredContent:N,isError:B,content:D}=await H.callTool({name:String(w),arguments:K});if(B){let L=D?.[0]?.text,z=typeof L==="string"?$e1(L):null,j=z?.code&&typeof $?.getErrorByStatusCode==="function"?$.getErrorByStatusCode(z.code,z.message,z.traceId):null;if(j)throw j;throw Error(`Tool ${String(w)} returned an error: ${JSON.stringify(N??D)}`)}if(N!==void 0)return N;let E=D?.[0]?.text;return typeof E==="string"?$e1(E):void 0}async function Q(){let{client:K}=await Z(),{tools:w}=await K.listTools();return w}async function J(){if(!("connection"in $))return Q();let K=$.connection,w=JSON.stringify(K);try{if(!O50.has(w))O50.set(w,Q());return await O50.get(w)}catch(U){console.error("Failed to list tools",U),O50.delete(w);return}}async function W(){return(await J()??[]).map((w)=>Ze1(w,Y))}return Y.asTool=async()=>{let w=(await J()??[]).find((U)=>U.name===X);if(!w)throw Error(`Tool ${X} not found`);return Ze1(w,Y)},Y}})}var $e1=($)=>{try{return JSON.parse($)}catch{return $}},O50,Ze1=($,Z)=>{return{...$,id:$.name,inputSchema:$.inputSchema?W7($.inputSchema):void 0,outputSchema:$.outputSchema?W7($.outputSchema):void 0,execute:(G)=>{return Z(G.context,$.name)}}};var Xe1=O(()=>{rs1();es1();O50=new Map});function LE($){return Ge1($)}var Yv;var tu0=O(()=>{Xe1();Yv=new Proxy({},{get($,Z){if(Z==="toJSON")return null;if(Z==="forConnection")return(G)=>LE({connection:G});return global[Z]}})});function D50($){return{isImplementedBy:(Z)=>{for(let G of $){let X=typeof G.name==="string"?new RegExp(`^${G.name}$`):G.name,Y=Z.find((Q)=>X.test(Q.name));if(!Y&&G.opt)continue;if(!Y)return!1}return!0}}}var bW=($)=>{return{...D50($),forClient:(Z)=>{return LE({client:Z})},forConnection:(Z)=>{return LE({connection:Z})}}};var zE=O(()=>{tu0()});import{z as P8}from"zod";function mw($){return P8.object({items:P8.array($).describe("Array of collection items"),totalCount:P8.number().int().min(0).optional().describe("Total number of matching items (if available)"),hasMore:P8.boolean().optional().describe("Whether there are more items available")})}function di($){return P8.object({item:$.nullable().describe("The retrieved item, or null if not found")})}function aa8($){return P8.object({data:$.partial().describe("Data for the new entity (id may be auto-generated)")})}function sa8($){return P8.object({item:$.describe("The created entity with generated id")})}function ea8($){return P8.object({id:P8.string().describe("ID of the entity to update"),data:$.partial().describe("Partial entity data to update")})}function $s8($){return P8.object({item:$.describe("The updated entity")})}function mi($){return P8.object({item:$.describe("The deleted entity")})}function Jv($,Z,G){let X=$.toUpperCase(),Y=G?.readOnly??!1,Q=[{name:`COLLECTION_${X}_LIST`,inputSchema:JJ,outputSchema:mw(Z)},{name:`COLLECTION_${X}_GET`,inputSchema:ui,outputSchema:di(Z)}];if(!Y)Q.push({name:`COLLECTION_${X}_CREATE`,inputSchema:aa8(Z),outputSchema:sa8(Z),opt:!0},{name:`COLLECTION_${X}_UPDATE`,inputSchema:ea8(Z),outputSchema:$s8(Z),opt:!0},{name:`COLLECTION_${X}_DELETE`,inputSchema:li,outputSchema:mi(Z),opt:!0});return Q}var Qv,ra8,Ye1,oa8,JJ,ui,li;var TY=O(()=>{Qv=P8.object({id:P8.string().describe("Unique identifier for the entity"),title:P8.string().describe("Human-readable title for the entity"),description:P8.string().nullish().describe("Description of the entity"),created_at:P8.string().datetime(),updated_at:P8.string().datetime(),created_by:P8.string().optional(),updated_by:P8.string().optional()}),ra8=P8.object({field:P8.array(P8.string()),operator:P8.enum(["eq","gt","gte","lt","lte","in","like","contains"]),value:P8.unknown()}),Ye1=P8.lazy(()=>P8.union([ra8,P8.object({operator:P8.enum(["and","or","not"]),conditions:P8.array(Ye1)})])),oa8=P8.object({field:P8.array(P8.string()),direction:P8.enum(["asc","desc"]),nulls:P8.enum(["first","last"]).optional()}),JJ=P8.object({where:Ye1.optional().describe("Filter expression"),orderBy:P8.array(oa8).optional().describe("Sort expressions"),limit:P8.number().int().min(1).max(1000).optional().describe("Maximum number of items to return"),offset:P8.number().int().min(0).optional().describe("Number of items to skip")});ui=P8.object({id:P8.string().describe("ID of the entity to retrieve")});li=P8.object({id:P8.string().describe("ID of the entity to delete")})});import{z as _$}from"zod";var Zs8,Qe1,QQ5;var Je1=O(()=>{TY();Zs8=_$.object({id:_$.string(),name:_$.string(),description:_$.string().optional(),inputSchema:_$.record(_$.string(),_$.unknown()),outputSchema:_$.record(_$.string(),_$.unknown()).optional()}),Qe1=Qv.extend({_meta:_$.object({"io.decocms":_$.object({id:_$.string(),verified:_$.boolean(),scopeName:_$.string(),appName:_$.string(),friendlyName:_$.string().nullable().optional(),metadata:_$.record(_$.string(),_$.unknown()).nullable().optional(),publishedAt:_$.string().datetime().optional(),updatedAt:_$.string().datetime().optional(),tools:_$.array(Zs8).nullable().optional().describe("Available tools exposed by this app")}).optional()}).optional(),server:_$.object({$schema:_$.string().optional(),_meta:_$.record(_$.string(),_$.unknown()).optional(),name:_$.string().describe("The server name (scope/app)"),title:_$.string().optional().describe("User-friendly title"),description:_$.string().optional().describe("Server description"),icons:_$.array(_$.object({src:_$.string(),mimeType:_$.string().optional(),sizes:_$.array(_$.string()).optional(),theme:_$.enum(["light","dark"]).optional()})).optional(),remotes:_$.array(_$.object({type:_$.enum(["http","stdio","sse"]),url:_$.string().optional(),headers:_$.array(_$.unknown()).optional()})).optional(),packages:_$.array(_$.unknown()).optional(),repository:_$.object({url:_$.string(),source:_$.string().optional(),subfolder:_$.string().optional()}).optional(),version:_$.string().optional(),websiteUrl:_$.string().optional()})}),QQ5=Jv("registry_app",Qe1,{readOnly:!0})});import{z as f5}from"zod";var We1,E50,Ke1,L50,we1,Gs8;var Ue1=O(()=>{zE();We1=f5.object({specversion:f5.literal("1.0").describe("CloudEvents specification version"),id:f5.string().describe("Unique identifier for this event (UUID recommended)"),source:f5.string().describe("Connection ID of the event publisher"),type:f5.string().describe("Event type (e.g., 'order.created', 'user.signup')"),time:f5.string().datetime().optional().describe("Timestamp of when the event occurred (ISO 8601)"),subject:f5.string().optional().describe("Subject/resource identifier (e.g., order ID, user ID)"),datacontenttype:f5.string().optional().default("application/json").describe("Content type of the data attribute"),dataschema:f5.string().url().optional().describe("URI to the schema for the data attribute"),data:f5.unknown().optional().describe("Event payload (any JSON value)")}),E50=f5.object({events:f5.array(We1).min(1).describe("Batch of CloudEvents to process")}),Ke1=f5.object({success:f5.boolean().optional().describe("Whether this event was processed successfully"),error:f5.string().optional().describe("Error message for this event"),retryAfter:f5.number().int().positive().optional().describe("Re-deliver this event after this many ms")}),L50=f5.object({success:f5.boolean().optional().describe("Batch success - applies to events not in results"),error:f5.string().optional().describe("Batch error message - applies to events not in results"),processedCount:f5.number().int().min(0).optional().describe("Number of events successfully processed"),retryAfter:f5.number().int().positive().optional().describe("Batch retryAfter - applies to events not in results"),results:f5.record(f5.string(),Ke1).optional().describe("Per-event results keyed by event ID")}),we1=[{name:"ON_EVENTS",inputSchema:E50,outputSchema:L50}],Gs8=bW(we1)});import{z as x5}from"zod";var Fe1,He1,Ne1,Be1,Oe1,De1,z50,ru0;var ou0=O(()=>{zE();Fe1=x5.object({type:x5.literal("string"),enum:x5.array(x5.string()).optional(),description:x5.string().optional()}),He1=x5.object({type:x5.string(),description:x5.string(),paramsSchema:x5.record(x5.string(),Fe1)}),Ne1=x5.object({}),Be1=x5.object({triggers:x5.array(He1)}),Oe1=x5.object({type:x5.string(),params:x5.record(x5.string(),x5.string()),enabled:x5.boolean(),callbackUrl:x5.url().optional(),callbackToken:x5.string().min(1).optional()}),De1=x5.object({success:x5.boolean()}),z50=[{name:"TRIGGER_LIST",inputSchema:Ne1,outputSchema:Be1},{name:"TRIGGER_CONFIGURE",inputSchema:Oe1,outputSchema:De1}],ru0=bW(z50)});import{z as P4}from"zod";var Ee1,Le1,ze1,ii,j50,P50,A50,T50,Xs8;var au0=O(()=>{zE();Ee1=P4.object({primary:P4.string().optional().describe("Primary brand color (hex)"),secondary:P4.string().optional().describe("Secondary brand color (hex)"),accent:P4.string().optional().describe("Accent / highlight color (hex)"),background:P4.string().optional().describe("Background color (hex)"),foreground:P4.string().optional().describe("Foreground / text color (hex)")}),Le1=P4.object({heading:P4.string().optional().describe("Font family for headings"),body:P4.string().optional().describe("Font family for body text"),code:P4.string().optional().describe("Font family for code / monospace")}),ze1=P4.object({logo:P4.string().optional().describe("Logo URL"),favicon:P4.string().optional().describe("Favicon URL"),ogImage:P4.string().optional().describe("Open Graph image URL")}),ii=P4.object({id:P4.string(),name:P4.string().describe("Brand / company name"),domain:P4.string().optional().describe("Company domain (e.g. example.com)"),colors:Ee1.optional().describe("Semantic color palette"),fonts:Le1.optional().describe("Font families by role"),assets:ze1.optional().describe("Visual identity assets"),overview:P4.string().optional().describe("Company overview / description"),tagline:P4.string().optional().describe("Brand tagline"),tone:P4.string().optional().describe("Tone of voice description"),metadata:P4.record(P4.string(),P4.unknown()).optional().describe("Extra design tokens and metadata")}),j50=P4.object({id:P4.string().optional().describe("Brand ID. Omit to get the default brand.")}),P50=P4.object({}),A50=P4.object({items:P4.array(ii)}),T50=[{name:"BRAND_GET",inputSchema:j50,outputSchema:ii},{name:"BRAND_LIST",inputSchema:P50,outputSchema:A50,opt:!0}],Xs8=bW(T50)});var su0=O(()=>{zE();Je1();Ue1();ou0();uc();au0()});import{z as Wv}from"zod";var Ys8,Qs8,je1;var Pe1=O(()=>{TY();Ys8=Qv.extend({avatar:Wv.string().describe("URL or data URI to the assistant's avatar image"),system_prompt:Wv.string().describe("System prompt that defines the assistant's behavior"),virtual_mcp_id:Wv.string().describe("Virtual MCP ID to use for this assistant"),model:Wv.object({id:Wv.string().describe("Model ID"),connectionId:Wv.string().describe("Connection ID that provides the model")}).describe("Selected model reference for this assistant")}),Qs8=Jv("assistant",Ys8),je1=[...Qs8]});import{z as I0}from"zod";var ni,iw,Te1,Js8,Ws8,Ie1,Ks8,ws8,Us8,Fs8,Hs8,Ns8,Re1,Bs8,Os8,Ds8,Es8,Ls8,zs8,js8,Ps8,As8,Ts8,CQ5,Is8,_Q5,Ae1,Rs8,qs8,I50,bQ5;var qe1=O(()=>{zE();TY();ni=I0.lazy(()=>I0.union([I0.null(),I0.string(),I0.number(),I0.boolean(),I0.record(I0.string(),ni),I0.array(ni)])),iw=I0.record(I0.string(),I0.record(I0.string(),ni)).optional().describe("Additional provider-specific options. Outer record keyed by provider name, inner by option key"),Te1=I0.object({type:I0.literal("text"),text:I0.string().describe("The text content"),providerOptions:iw}),Js8=I0.object({type:I0.literal("text"),text:I0.string().describe("The text content"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),Ws8=I0.string().describe("File data as URL string"),Ie1=I0.object({type:I0.literal("file"),filename:I0.string().optional().describe("Optional filename of the file"),data:Ws8,mediaType:I0.string().describe("IANA media type of the file (e.g., image/png, audio/mp3)"),providerOptions:iw}),Ks8=I0.object({type:I0.literal("file"),mediaType:I0.string().describe("IANA media type of the file (e.g., image/png, audio/mp3)"),data:I0.string().describe("Generated file data as base64 encoded string")}),ws8=I0.object({type:I0.literal("reasoning"),text:I0.string().describe("The reasoning text"),providerOptions:iw}),Us8=I0.object({type:I0.literal("reasoning"),text:I0.string().describe("The reasoning text"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),Fs8=I0.object({type:I0.literal("tool-call"),toolCallId:I0.string().describe("ID of the tool call, used to match with tool result"),toolName:I0.string().describe("Name of the tool being called"),input:I0.string().describe("Arguments of the tool call (JSON-serializable object matching tool input schema)"),providerExecuted:I0.boolean().optional().describe("Whether the tool call will be executed by the provider"),providerOptions:iw}),Hs8=I0.object({type:I0.literal("tool-call"),toolCallId:I0.string().describe("ID of the tool call"),toolName:I0.string().describe("Name of the tool being called"),input:I0.string().describe("Stringified JSON object with the tool call arguments"),providerExecuted:I0.boolean().optional().describe("Whether the tool call will be executed by the provider"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),Ns8=I0.union([I0.object({type:I0.literal("text"),value:I0.string()}),I0.object({type:I0.literal("json"),value:ni}),I0.object({type:I0.literal("error-text"),value:I0.string()}),I0.object({type:I0.literal("error-json"),value:ni}),I0.object({type:I0.literal("content"),value:I0.array(I0.union([I0.object({type:I0.literal("text"),text:I0.string().describe("Text content")}),I0.object({type:I0.literal("media"),data:I0.string().describe("Base-64 encoded media data"),mediaType:I0.string().describe("IANA media type")})]))}),I0.object({type:I0.literal("execution-denied"),reason:I0.string().optional()}),I0.string().describe("Raw or JSON-serialized output (e.g. from AI SDK mapToolResultOutput)")]),Re1=I0.object({type:I0.literal("tool-result"),toolCallId:I0.string().describe("ID of the tool call that this result is associated with"),toolName:I0.string().describe("Name of the tool that generated this result"),output:Ns8.describe("Result of the tool call"),result:I0.unknown().describe("Unknown result of the tool call"),providerOptions:iw}),Bs8=I0.object({type:I0.literal("tool-result"),toolCallId:I0.string().describe("ID of the tool call that this result is associated with"),toolName:I0.string().describe("Name of the tool that generated this result"),result:I0.any().describe("Result of the tool call (JSON-serializable)"),isError:I0.boolean().optional().describe("Whether the result is an error or error message"),providerExecuted:I0.boolean().optional().describe("Whether the tool result was generated by the provider"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),Os8=I0.union([I0.object({type:I0.literal("source"),sourceType:I0.literal("url"),id:I0.string().describe("The ID of the source"),url:I0.string().describe("The URL of the source"),title:I0.string().optional().describe("The title of the source"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),I0.object({type:I0.literal("source"),sourceType:I0.literal("document"),id:I0.string().describe("The ID of the source"),mediaType:I0.string().describe("IANA media type of the document (e.g., application/pdf)"),title:I0.string().describe("The title of the document"),filename:I0.string().optional().describe("Optional filename of the document"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")})]),Ds8=I0.object({role:I0.literal("system"),content:I0.string().describe("System message content"),providerOptions:iw}),Es8=I0.object({role:I0.literal("user"),content:I0.array(I0.union([Te1,Ie1])).describe("User message content parts (text or file)"),providerOptions:iw}),Ls8=I0.object({role:I0.literal("assistant"),content:I0.array(I0.union([Te1,Ie1,ws8,Fs8,Re1])).describe("Assistant message content parts (text, file, reasoning, tool-call, or tool-result)"),providerOptions:iw}),zs8=I0.object({role:I0.literal("tool"),content:I0.array(Re1).describe("Tool message content (tool results)"),providerOptions:iw}),js8=I0.union([Ds8,Es8,Ls8,zs8]),Ps8=I0.array(js8).describe("A list of messages forming the prompt"),As8=I0.object({prompt:Ps8.describe("A language model prompt is a standardized prompt type (array of messages with roles: system, user, assistant, tool)"),maxOutputTokens:I0.number().optional().describe("Maximum number of tokens to generate"),temperature:I0.number().optional().describe("Temperature setting. The range depends on the provider and model"),topP:I0.number().optional().describe("Nucleus sampling parameter"),topK:I0.number().optional().describe("Only sample from the top K options for each subsequent token. Used to remove long tail low probability responses"),presencePenalty:I0.number().optional().describe("Presence penalty setting. It affects the likelihood of the model to repeat information that is already in the prompt"),frequencyPenalty:I0.number().optional().describe("Frequency penalty setting. It affects the likelihood of the model to repeatedly use the same words or phrases"),seed:I0.number().optional().describe("The seed (integer) to use for random sampling. If set and supported by the model, calls will generate deterministic results"),stopSequences:I0.array(I0.string()).optional().describe("Stop sequences. If set, the model will stop generating text when one of the stop sequences is generated"),responseFormat:I0.union([I0.object({type:I0.literal("text")}),I0.object({type:I0.literal("json"),schema:I0.any().optional().describe("JSON schema that the generated output should conform to"),name:I0.string().optional().describe("Name of output that should be generated"),description:I0.string().optional().describe("Description of the output that should be generated")})]).optional().describe("Response format. The output can either be text or JSON. Default is text"),tools:I0.array(I0.any()).optional().describe("The tools that are available for the model"),toolChoice:I0.any().optional().describe("Specifies how the tool should be selected. Defaults to 'auto'"),includeRawChunks:I0.boolean().optional().describe("Include raw chunks in the stream. Only applicable for streaming calls"),abortSignal:I0.any().optional().describe("Abort signal for cancelling the operation"),providerOptions:I0.any().optional().describe("Additional provider-specific options")}),Ts8=I0.object({content:I0.array(I0.union([Js8,Ks8,Us8,Hs8,Bs8,Os8])).describe("Ordered content that the model has generated (text, tool-calls, reasoning, files, sources)"),finishReason:I0.enum(["stop","length","content-filter","tool-calls","error","other","unknown"]).describe("Reason why generation stopped"),usage:I0.looseObject({inputTokens:I0.number().optional(),outputTokens:I0.number().optional(),totalTokens:I0.number().optional(),reasoningTokens:I0.number().optional()}).describe("Usage information for the language model call"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata"),request:I0.object({body:I0.any().optional().describe("Request HTTP body sent to the provider API")}).optional().describe("Optional request information for telemetry and debugging"),response:I0.object({id:I0.string().optional().describe("ID for the generated response"),timestamp:I0.iso.datetime().optional().describe("Timestamp for the start of the generated response"),modelId:I0.string().optional().describe("The ID of the response model that was used"),headers:I0.record(I0.string(),I0.string()).optional().describe("Response headers"),body:I0.any().optional().describe("Response HTTP body")}).optional().describe("Optional response information for telemetry and debugging"),warnings:I0.array(I0.any()).describe("Warnings for the call, e.g. unsupported settings")}),CQ5=I0.object({stream:I0.any().describe("ReadableStream of LanguageModelV2StreamPart"),request:I0.object({body:I0.any().optional().describe("Request HTTP body sent to the provider API")}).optional().describe("Optional request information for telemetry and debugging"),response:I0.object({headers:I0.record(I0.string(),I0.string()).optional().describe("Response headers")}).optional().describe("Optional response data")}),Is8=I0.object({supportedUrls:I0.record(I0.string(),I0.array(I0.string())).describe("Supported URL patterns by media type for the provider")}),_Q5=I0.object({modelId:I0.string().describe("The ID of the model"),logo:I0.string().nullable(),description:I0.string().nullable(),capabilities:I0.array(I0.string()),limits:I0.object({contextWindow:I0.number(),maxOutputTokens:I0.number()}).nullable(),costs:I0.object({input:I0.number(),output:I0.number()}).nullable(),provider:I0.enum(["openai","anthropic","google","x-ai","deepseek","openai-compatible","openrouter"]).nullable()}),Ae1=I0.object({modelId:I0.string().describe("The ID of the model"),callOptions:As8}),Rs8=Qv.extend({logo:I0.string().nullable(),description:I0.string().nullable(),capabilities:I0.array(I0.string()),limits:I0.object({contextWindow:I0.number(),maxOutputTokens:I0.number()}).nullable(),costs:I0.object({input:I0.number(),output:I0.number()}).nullable(),provider:I0.enum(["openai","anthropic","google","xai","deepseek","openai-compatible","openrouter"]).nullable()}),qs8=Jv("llm",Rs8,{readOnly:!0}),I50=[{name:"LLM_METADATA",inputSchema:I0.object({modelId:I0.string().describe("The ID of the model")}),outputSchema:Is8},{name:"LLM_DO_STREAM",inputSchema:Ae1},{name:"LLM_DO_GENERATE",inputSchema:Ae1,outputSchema:Ts8},...qs8],bQ5=bW(I50)});import{z as jE}from"zod";var Ms8,Me1;var ke1=O(()=>{Ms8=jE.object({scopes:jE.array(jE.string()).describe("List of scopes available"),stateSchema:jE.record(jE.string(),jE.unknown()).describe("JSON Schema (draft-07) defining the state structure")}),Me1=[{name:"MCP_CONFIGURATION",inputSchema:jE.object({}),outputSchema:Ms8}]});import{z as v5}from"zod";var ks8,Ss8,Se1;var Ve1=O(()=>{ks8=v5.object({}).strict(),Ss8=v5.object({billing:v5.object({mode:v5.enum(["prepaid","postpaid"]),limitPeriod:v5.enum(["daily","weekly","monthly"]).nullable()}),limit:v5.object({total:v5.number().nullable(),remaining:v5.number().nullable(),reset:v5.string().nullable()}),usage:v5.object({total:v5.number(),daily:v5.number(),weekly:v5.number(),monthly:v5.number()}),alert:v5.object({enabled:v5.boolean(),threshold_usd:v5.number(),email:v5.string().nullable()}),connectionId:v5.string()}),Se1=[{name:"GATEWAY_USAGE",inputSchema:ks8,outputSchema:Ss8},{name:"GATEWAY_SET_LIMIT",inputSchema:v5.object({}),outputSchema:v5.object({}),opt:!0},{name:"GATEWAY_SET_ALERT",inputSchema:v5.object({}),outputSchema:v5.object({}),opt:!0}]});function Vs8($,Z){if(Z.length===0)return;let[G,...X]=Z,Y=G==="slug"?$H($):$[G];for(let Q of X){if(Y===null||typeof Y!=="object")return;Y=Y[Q]}return Y}function Cs8($){let G=$.replace(/[.*+?^${}()|[\]\\]/g,"\\$&").replace(/%/g,".*").replace(/_/g,".");return new RegExp(`^${G}$`,"i")}function _s8($,Z,G){if($===void 0)return!0;switch(Z){case"eq":return G===null?$===null:$===G;case"gt":return $>G;case"gte":return $>=G;case"lt":return $<G;case"lte":return $<=G;case"in":return Array.isArray(G)&&G.includes($);case"like":return typeof $==="string"&&Cs8(String(G)).test($);case"contains":return String($).toLowerCase().includes(String(G).toLowerCase());default:return!0}}function pi($,Z){if(!Z)return!0;if("conditions"in Z){let{operator:X,conditions:Y}=Z;if(Y.length===0)return!0;switch(X){case"and":return Y.every((Q)=>pi($,Q));case"or":return Y.some((Q)=>pi($,Q));case"not":return!Y.every((Q)=>pi($,Q));default:return!0}}let G=Vs8($,Z.field);return _s8(G,Z.operator,Z.value)}var Ce1=O(()=>{d$0()});async function _e1($,Z,G){if($.length===0)return;let X=0;async function Y(){while(X<$.length){let Q=X++;await G($[Q])}}await Promise.all(Array.from({length:Math.min(Z,$.length)},()=>Y()))}import{z as KN}from"zod";var bs8=8,fs8,xs8,vs8,ys8,eu0;var be1=O(()=>{su0();Pe1();TY();qe1();ke1();uc();Ve1();R8();Y1();OG();UY();WN();fb();KW();d$0();Ce1();fs8=[{name:/^(COLLECTION_REGISTRY_APP_LIST|REGISTRY_ITEM_LIST)$/,inputSchema:KN.object({})}],xs8={LLM:I50,LLMS:I50,ASSISTANTS:je1,MCP:Me1,OBJECT_STORAGE:_O,AI_GATEWAY_BILLING:Se1,TRIGGER:z50,REGISTRY:fs8,BRAND:T50},vs8=JJ.extend({binding:KN.union([KN.array(KN.object({}).passthrough()),KN.object({}).passthrough(),KN.string()]).optional(),include_virtual:KN.boolean().optional().describe("Whether to include VIRTUAL connections in the results. Defaults to false."),slug:KN.string().optional().describe("Filter by connection slug. Matches against app_name, or a slug derived from connection_url or title.")}),ys8=mw(aZ),eu0=$0({name:"COLLECTION_CONNECTIONS_LIST",description:"List all connections in the organization with filtering, sorting, and pagination",annotations:{title:"List Connections",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:vs8,outputSchema:ys8,handler:async($,Z)=>{await Z.access.check();let G=O0(Z),X=$.binding?typeof $.binding==="string"?(()=>{let F=xs8[$.binding.toUpperCase()];if(!F)throw Error(`Unknown binding: ${$.binding}`);return F})():$.binding:void 0,Y=X?D50(X):void 0,Q=!!Y,J=$.limit??100,W=$.offset??0,{items:K,totalCount:w}=await Z.storage.connections.list(G.id,{includeVirtual:$.include_virtual??!1,slug:$.slug,where:$.where,orderBy:$.orderBy,limit:Q?void 0:J,offset:Q?void 0:W});if(Y){let F=t5(),H=G4.SELF(G.id);await _e1(K,bs8,async(N)=>{if(N.tools!==null)return;let B=N.id===H?async()=>{let{listManagementTools:E}=await Promise.resolve().then(() => (PE(),R50));return E(Z)}:()=>lu0(N,Z,_y1),D=await KH("tools",N.id,B,F,(E)=>Z.pendingRevalidations.push(E),WH);if(D!==null)N.tools=D})}if(f3()){let F=jZ(),H=G4.DEV_ASSETS(G.id);if(!K.some((N)=>N.id===H)){let N=bb(G.id,F),B=!$.slug||$H(N)===$.slug,D=pi(N,$.where);if(B&&D)K.unshift(N)}}if(Q){let F=(await Promise.all(K.map(async(D)=>{if(!D.tools||D.tools.length===0)return null;return Y.isImplementedBy(D.tools.map((L)=>({name:L.name,inputSchema:L.inputSchema,outputSchema:L.outputSchema})))?D:null}))).filter((D)=>D!==null),H=F.length,N=F.slice(W,W+J),B=W+J<H;return{items:N,totalCount:H,hasMore:B}}let U=W+J<w;return{items:K,totalCount:w,hasMore:U}}})});var gs8,$d0;var fe1=O(()=>{TY();R8();Y1();OG();UY();WN();fb();KW();gs8=di(aZ),$d0=$0({name:"COLLECTION_CONNECTIONS_GET",description:"Get a connection's configuration, tools list, and status by ID.",annotations:{title:"Get Connection",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},_meta:{ui:{visibility:["app"]}},inputSchema:ui,outputSchema:gs8,handler:async($,Z)=>{let G=O0(Z);if(await Z.access.check(),f3()&&d10($.id,G.id))return{item:bb(G.id,jZ())};let X=await Z.storage.connections.findById($.id);if(!X||X.organization_id!==G.id)return{item:null};if(X.tools===null){let Y=G4.SELF(G.id),Q=X.id===Y?async()=>{let{listManagementTools:W}=await Promise.resolve().then(() => (PE(),R50));return W(Z)}:async()=>{let W=await o9(X,Z,!0);try{return(await W.listTools()).tools}finally{await W.close().catch(()=>{})}},J=await KH("tools",X.id,Q,t5(),(W)=>Z.pendingRevalidations.push(W),WH);if(J!==null)X.tools=J}return{item:X}}})});import{z as Zd0}from"zod";function us8($,Z){return $.length===Z.length&&$.every((G,X)=>G===Z[X])}var hs8,cs8,Gd0;var xe1=O(()=>{WN();QJ();Y1();F8();UY();ol();mu0();Td();KW();hs8=Zd0.object({id:Zd0.string().describe("ID of the connection to update"),data:ku.describe("Partial connection data to update")}),cs8=Zd0.object({item:aZ.describe("The updated connection entity")});Gd0=$0({name:"COLLECTION_CONNECTIONS_UPDATE",description:"Update a connection's configuration. Re-fetches tools from the server on URL change.",annotations:{title:"Update Connection",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:hs8,outputSchema:cs8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to update connection");let{id:Y,data:Q}=$,J=Q.configuration_state!==void 0||Q.configuration_scopes!==void 0,W=await Z.storage.connections.findById(Y);if(!W||W.organization_id!==G.id)throw Error("Connection not found in organization");let K=Q.connection_type??W.connection_type,w=Q.connection_url??W.connection_url;if(K==="VIRTUAL"){let f=iO(w);if(!f)throw Error("VIRTUAL connection requires connection_url in format: virtual://$virtual_mcp_id");let v=await Z.storage.virtualMcps.findById(f);if(!v)throw Error(`Virtual MCP not found: ${f}`);if(v.organization_id!==G.id)throw Error("Virtual MCP does not belong to the current organization");w=nO(f)}let U=Q.configuration_state??W.configuration_state??{},F=Q.configuration_scopes??W.configuration_scopes??[];if(J){if(Q.configuration_state!==void 0)U=Q.configuration_state??{};else if(U===null||U===void 0)U={};if(Q.configuration_scopes!==void 0)F=Q.configuration_scopes??[];if(F.length>0){let f=U;yi(f,F,G.id),await hi(f,F,G.id,Z)}}if(K==="STDIO"&&!O1().localMode)throw Error("STDIO connections are only available in local mode (--local-mode).");let H=Q.connection_token??W.connection_token;if(!H)try{let v=await new b5(Z.db,Z.vault).get(Y);if(v?.accessToken)H=v.accessToken}catch{}let N=await GH({id:W.id,title:Q.title??W.title,connection_type:K,connection_url:w,connection_token:H,connection_headers:Q.connection_headers??W.connection_headers}).catch(()=>null),B=N?.tools?.length?N.tools:null,D=!1;if(Q.configuration_scopes===void 0&&N?.scopes?.length)D=!us8(F,N.scopes),F=N.scopes;if(yi(U,F,G.id),D&&F.length>0)await hi(U,F,G.id,Z);let E=J||D,L=E?gi(U,F):[],z=E?gi(W.configuration_state??{},W.configuration_scopes??[]):[],j=W.configuration_state,P=j==null||Object.keys(j).length===0,A,M,S=async()=>{try{await Z.storage.connectionCredentialVault.replaceGrantsForSubject({organizationId:G.id,subjectConnectionId:Y,createdBy:X,grants:z})}catch(f){console.error("Failed to restore credential grants after credential vault mutation failed",f)}},R={...Q,connection_url:w,tools:null,configuration_state:U,configuration_scopes:F,updated_by:X},V={...W,...R};if(E)try{if(await Z.storage.connectionCredentialVault.replaceGrantsForSubject({organizationId:G.id,subjectConnectionId:Y,createdBy:X,grants:L}),L.length>0){if(!await Z.storage.connectionCredentialVault.findActiveWorkloadToken({organizationId:G.id,subjectConnectionId:Y})){let{plaintextToken:v,record:Z0}=await Z.storage.connectionCredentialVault.createOrRotateWorkloadToken({organizationId:G.id,subjectConnectionId:Y});M=Z0.id,A={baseUrl:Z.baseUrl,org:G.slug??G.id,subjectConnectionId:Y,token:v}}}}catch(f){if(M)await Z.storage.connectionCredentialVault.revokeWorkloadToken({organizationId:G.id,subjectConnectionId:Y,tokenId:M});throw await S(),f}if(E&&U&&F)try{await(await o9(V,Z,!1)).callTool({name:"ON_MCP_CONFIGURATION",arguments:{state:U,scopes:F,firstRun:P,...A?{vault:A}:{}}})}catch(f){if(console.error("Failed to invoke ON_MCP_CONFIGURATION callback",f),M)throw await Z.storage.connectionCredentialVault.revokeWorkloadToken({organizationId:G.id,subjectConnectionId:Y,tokenId:M}),await S(),f}let i;try{i=await Z.storage.connections.update(Y,R)}catch(f){if(E){if(M)await Z.storage.connectionCredentialVault.revokeWorkloadToken({organizationId:G.id,subjectConnectionId:Y,tokenId:M});await S()}throw f}if(B)t5()?.set("tools",Y,B).catch(()=>{});return Nx(Y),{item:i}}})});import{z as ds8}from"zod";var ls8,Xd0;var ve1=O(()=>{TY();q4();Y1();UY();ol();KW();ls8=li.extend({force:ds8.boolean().optional().describe("If true, removes this connection from all agents that reference it before deleting")}),Xd0=$0({name:"COLLECTION_CONNECTIONS_DELETE",description:"Permanently delete a connection. Set force=true to auto-remove from referencing Virtual MCPs.",annotations:{title:"Delete Connection",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:ls8,outputSchema:mi(aZ),handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.connections.findById($.id);if(!X)throw Error(`Connection not found: ${$.id}`);if(X.organization_id!==G.id)throw Error("Connection not found in organization");if(X.metadata?.isFixed===!0)throw Error("This connection is a fixed system connection and cannot be deleted");let Q=await Z.storage.virtualMcps.listByConnectionId(G.id,$.id);if(Q.length>0)if($.force)await Z.storage.virtualMcps.removeConnectionReferences($.id);else throw Error(JSON.stringify({code:"CONNECTION_IN_USE",agentNames:Q.map((K)=>K.title)}));await Z.storage.connections.delete($.id);let J=await Z.storage.organizationSettings.get(G.id);if(J?.registry_config){let{registries:K,blockedMcps:w}=J.registry_config;if($.id in K){let{[$.id]:U,...F}=K;await Z.storage.organizationSettings.upsert(G.id,{registry_config:{registries:F,blockedMcps:w}})}}t5()?.invalidate($.id).catch(()=>{}),Nx($.id);let W=y1(Z);if(W)i1.capture({distinctId:W,event:"connection_deleted",groups:{organization:G.id},properties:{connection_id:X.id,connection_type:X.connection_type,app_name:X.app_name??null,organization_id:G.id,forced:$.force??!1}});return{item:X}}})});import{z as Kv}from"zod";var Yd0;var ye1=O(()=>{Y1();Yd0=$0({name:"CONNECTION_TEST",description:"Test connection health and latency",annotations:{title:"Test Connection",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:Kv.object({id:Kv.string()}),outputSchema:Kv.object({id:Kv.string(),healthy:Kv.boolean(),latencyMs:Kv.number()}),handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=await Z.storage.connections.findById($.id);if(!X||X.organization_id!==G.id)throw Error("Connection not found");let Y=await Z.storage.connections.testConnection($.id);return{id:$.id,...Y}}})});var ge1=O(()=>{is1();be1();fe1();xe1();ve1();ye1()});import{sql as c6}from"kysely";import{z as fW}from"zod";function he1($){if($===null||$===void 0)return"NULL";if(typeof $==="number")return String($);if(typeof $==="boolean")return $?"TRUE":"FALSE";if(typeof $==="string")return`'${$.replace(/'/g,"''")}'`;if($ instanceof Date)return`'${$.toISOString()}'`;return`'${JSON.stringify($).replace(/'/g,"''")}'`}function ns8($,Z){let G=$;for(let Y=Z.length;Y>=1;Y--){let Q=`$${Y}`;if(G.includes(Q))G=G.replaceAll(Q,he1(Z[Y-1]))}let X=[];for(let Y=0;Y<G.length;Y++)if(G[Y]==="?")X.push(Y);for(let Y=Math.min(X.length,Z.length)-1;Y>=0;Y--){let Q=X[Y],J=he1(Z[Y]);G=G.slice(0,Q)+J+G.slice(Q+1)}return G}function ce1($){return $.replace(/-/g,"_")}function ts8($){return`app_${ce1($)}`}function rs8($){return`app_role_${ce1($)}`}function os8($){if($ instanceof Error){let Z=$.message.toLowerCase(),G=$.code;return G==="3F000"||G==="42704"||G==="22023"||Z.includes("schema")&&Z.includes("does not exist")||Z.includes("role")&&Z.includes("does not exist")}return!1}async function as8($,Z,G){if(await c6`CREATE SCHEMA IF NOT EXISTS ${c6.id(Z)}`.execute($),!(await c6`
     SELECT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = ${G}) as exists
-  `.execute($)).rows[0]?.exists)await c6`CREATE ROLE ${c6.id(G)} NOLOGIN`.execute($);await c6`GRANT ${c6.id(G)} TO CURRENT_USER`.execute($),await c6`GRANT USAGE, CREATE ON SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`GRANT ALL ON ALL TABLES IN SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`GRANT ALL ON ALL SEQUENCES IN SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`ALTER DEFAULT PRIVILEGES IN SCHEMA ${c6.id(Z)} GRANT ALL ON TABLES TO ${c6.id(G)}`.execute($),await c6`ALTER DEFAULT PRIVILEGES IN SCHEMA ${c6.id(Z)} GRANT ALL ON SEQUENCES TO ${c6.id(G)}`.execute($),await c6`REVOKE ALL ON SCHEMA public FROM ${c6.id(G)}`.execute($)}async function ss8($,Z,G,X){try{return await $.transaction().execute(async(Y)=>{return await c6`SET LOCAL ROLE ${c6.id(G)}`.execute(Y),await c6`SET LOCAL search_path TO ${c6.id(Z)}`.execute(Y),await c6.raw(X).execute(Y)})}catch(Y){if(os8(Y))return await as8($,Z,G),await $.transaction().execute(async(Q)=>{return await c6`SET LOCAL ROLE ${c6.id(G)}`.execute(Q),await c6`SET LOCAL search_path TO ${c6.id(Z)}`.execute(Q),await c6.raw(X).execute(Q)});throw Y}}var is8,ps8,ue1;var de1=O(()=>{Y1();is8=fW.object({results:fW.array(fW.unknown()).optional(),success:fW.boolean().optional()});ps8=fW.object({sql:fW.string().describe("The SQL query to run"),params:fW.array(fW.any()).describe("The parameters to pass to the SQL query").optional()});ue1=$0({name:"DATABASES_RUN_SQL",description:"Run a SQL query in a connection-scoped isolated schema. Supports SELECT, DDL, and DML.",annotations:{title:"Run SQL Query",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:ps8,outputSchema:fW.object({result:fW.array(is8)}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=ns8($.sql,$.params||[]);if(!Z.connectionId)throw Error("Connection context required for database access");console.warn("DATABASES_RUN_SQL invoked",{"tool.deprecation_probe":"DATABASES_RUN_SQL","connection.id":Z.connectionId,"organization.id":Z.organization?.id??null,"user.id":Z.auth.user?.id??null});let X=ts8(Z.connectionId),Y=rs8(Z.connectionId);return{result:[{results:(await ss8(Z.db,X,Y,G)).rows,success:!0}]}}})});function q50($){let Z=$.access.getRole();if(!Z||!DQ.includes(Z))throw new Vw("Only organization owners and admins can change org-wide pin status")}var Qd0=O(()=>{p3();gD()});import{z as ie1}from"zod";function $e8(){let $=le1[Math.floor(Math.random()*le1.length)];return`icon://${me1[Math.floor(Math.random()*me1.length)]}?color=${$}`}var le1,me1,Ze8,Ge8,Jd0;var ne1=O(()=>{Y1();QH();Qd0();vi();le1=["red","orange","amber","yellow","lime","green","emerald","cyan","sky","blue","indigo","violet","purple","fuchsia","pink","rose"],me1=["Star01","Zap","Heart","Globe01","Compass03","Lightbulb02","Rocket01","Flag01","BookOpen01","Shield01","Key01","Diamond01","Cube01","Target04","Award01","Briefcase01","Coffee","Feather","Hexagon01","Layers3_01","Map01","Palette","Package","Terminal"];Ze8=ie1.object({data:_u.describe("Data for the new virtual MCP")}),Ge8=ie1.object({item:sZ.describe("The created virtual MCP entity")}),Jd0=$0({name:"COLLECTION_VIRTUAL_MCP_CREATE",description:"Create a Virtual MCP (agent) that aggregates tools from multiple connections into one endpoint. Pass `prompts` to seed the agent with kickstart prompts (conversation starters shown as icebreakers). Author them from the agent's role/instructions and the descriptions of the tools it will have, so the starters are coherent and immediately useful.",annotations:{title:"Create Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Ze8,outputSchema:Ge8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to create virtual MCP");if($.data.pinned===!0)q50(Z);let{prompts:Y,...Q}=$.data,J={...Q,icon:Q.icon??$e8()},W=await Z.storage.virtualMcps.create(G.id,X,J);if(Y?.length&&Z.orgFs&&W.id)await Z50(Z.orgFs,W.id,X,Y);return{item:W}}})});function Xe8($){let Z=[],G=0;while(G<$.length){let X=$[G];if(X==="%")Z.push(".*");else if(X==="_")Z.push(".");else if(/[.*+?^${}()|[\]\\]/.test(X))Z.push("\\"+X);else Z.push(X);G++}return Z.join("")}function wN($){return typeof $==="string"||typeof $==="number"}function Wd0($,Z){let G=Z.split("."),X=$;for(let Y of G){if(X==null||typeof X!=="object")return;X=X[Y]}return X}function Ye8($,Z){return $.connections.some((G)=>G.connection_id===Z)}function M50($,Z){if("conditions"in Z){let{operator:W,conditions:K}=Z;switch(W){case"and":return K.every((w)=>M50($,w));case"or":return K.some((w)=>M50($,w));case"not":return!K.every((w)=>M50($,w));default:return!0}}let{field:G,operator:X,value:Y}=Z,Q=G.join(".");if(Q==="connection_id"){if(X!=="eq"||typeof Y!=="string")return!1;return Ye8($,Y)}let J=Wd0($,Q);switch(X){case"eq":return J===Y;case"gt":return wN(J)&&wN(Y)&&J>Y;case"gte":return wN(J)&&wN(Y)&&J>=Y;case"lt":return wN(J)&&wN(Y)&&J<Y;case"lte":return wN(J)&&wN(Y)&&J<=Y;case"in":return Array.isArray(Y)&&Y.includes(J);case"like":if(typeof J!=="string"||typeof Y!=="string")return!1;if(Y.length>100)return!1;let W=Xe8(Y);return new RegExp(`^${W}$`,"i").test(J);case"contains":if(typeof J!=="string"||typeof Y!=="string")return!1;return J.toLowerCase().includes(Y.toLowerCase());default:return!0}}function Qe8($,Z){return[...$].sort((G,X)=>{for(let Y of Z){let Q=Y.field.join("."),J=Wd0(G,Q),W=Wd0(X,Q),K=0;if(J==null&&W==null)continue;if(J==null)K=Y.nulls==="first"?-1:1;else if(W==null)K=Y.nulls==="first"?1:-1;else if(typeof J==="string"&&typeof W==="string")K=J.localeCompare(W);else if(typeof J==="number"&&typeof W==="number")K=J-W;else K=String(J).localeCompare(String(W));if(K!==0)return Y.direction==="desc"?-K:K}return 0})}var Je8,We8,Kd0;var pe1=O(()=>{TY();Y1();QH();Je8=JJ,We8=mw(sZ),Kd0=$0({name:"COLLECTION_VIRTUAL_MCP_LIST",description:"List all MCP virtual MCPs in the organization",annotations:{title:"List Virtual MCPs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Je8,outputSchema:We8,handler:async($,Z)=>{await Z.access.check();let G=O0(Z),X=$.where&&!("conditions"in $.where)&&$.where.field.join(".")==="connection_id"&&$.where.operator==="eq"&&typeof $.where.value==="string"?$.where.value:void 0,Y=$.where&&!("conditions"in $.where)&&$.where.field.join(".")==="pinned"&&$.where.operator==="eq"&&typeof $.where.value==="boolean"?$.where.value:void 0,J=X?await Z.storage.virtualMcps.listByConnectionId(G.id,X):await Z.storage.virtualMcps.list(G.id,Y!==void 0?{pinnedOnly:Y}:void 0);if($.where)J=J.filter((H)=>M50(H,$.where));if($.orderBy&&$.orderBy.length>0)J=Qe8(J,$.orderBy);let W=J.length,K=$.offset??0,w=$.limit??100,U=J.slice(K,K+w),F=K+w<W;return{items:U,totalCount:W,hasMore:F}}})});import{z as wd0}from"zod";var Ke8,we8,Ud0;var te1=O(()=>{Y1();QH();Ke8=wd0.object({id:wd0.string().describe("ID of the virtual MCP to retrieve")}),we8=wd0.object({item:sZ.nullable().describe("The retrieved virtual MCP, or null if not found")}),Ud0=$0({name:"COLLECTION_VIRTUAL_MCP_GET",description:"Get a Virtual MCP's configuration, connections, and virtual tools by ID.",annotations:{title:"Get Virtual MCP",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Ke8,outputSchema:we8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.virtualMcps.findById($.id);if(X&&X.organization_id!==G.id)return{item:null};if(!X)return{item:null};return{item:X}}})});import{z as Fd0}from"zod";var Ue8,Fe8,Hd0;var re1=O(()=>{Y1();vi();QH();Qd0();Ue8=Fd0.object({id:Fd0.string().describe("ID of the virtual MCP to update"),data:bu.describe("Partial virtual MCP data to update")}),Fe8=Fd0.object({item:sZ.describe("The updated virtual MCP entity")}),Hd0=$0({name:"COLLECTION_VIRTUAL_MCP_UPDATE",description:"Update a Virtual MCP's name, slug, connection list, or kickstart prompts. Pass `prompts` to replace the agent's conversation starters (full set; empty array clears them).",annotations:{title:"Update Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Ue8,outputSchema:Fe8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to update virtual MCP");let Y=await Z.storage.virtualMcps.findById($.id);if(!Y)throw Error(`Virtual MCP not found: ${$.id}`);if(Y.organization_id!==G.id)throw Error(`Virtual MCP not found: ${$.id}`);let{prompts:Q,...J}=$.data;if(J.metadata&&Y.metadata)J.metadata={...Y.metadata,...J.metadata};if(J.pinned!==void 0&&J.pinned!==Y.pinned)q50(Z);let W=await Z.storage.virtualMcps.update($.id,X,J);if(Q!==void 0&&Z.orgFs)await Z50(Z.orgFs,$.id,X,Q);return{item:W}}})});import{z as Nd0}from"zod";var He8,Ne8,Bd0;var oe1=O(()=>{JN();QJ();Y1();vi();QH();He8=Nd0.object({id:Nd0.string().describe("ID of the virtual MCP to delete")}),Ne8=Nd0.object({item:sZ.describe("The deleted virtual MCP entity")}),Bd0=$0({name:"COLLECTION_VIRTUAL_MCP_DELETE",description:"Permanently delete a Virtual MCP and its virtual tools.",annotations:{title:"Delete Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:He8,outputSchema:Ne8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.virtualMcps.findById($.id);if(!X)throw Error(`Virtual MCP not found: ${$.id}`);if(X.organization_id!==G.id)throw Error(`Virtual MCP not found: ${$.id}`);if(await Z.storage.virtualMcps.delete($.id),Z.orgFs)await cu0(Z.orgFs,$.id,y1(Z)??"system");let Y=X.metadata?.githubRepo?.connectionId;if(Y)try{let Q=await Z.storage.connections.findById(Y,G.id);if(Q&&MQ(Q)){let W=await new b5(Z.db,Z.vault).get(Y);if(W?.accessToken)try{await fetch("https://api.github.com/installation/token",{method:"DELETE",headers:{Authorization:`Bearer ${W.accessToken}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28"},signal:AbortSignal.timeout(5000)})}catch{}await Z.storage.connections.delete(Y)}}catch(Q){console.error("[VIRTUAL_MCP_DELETE] failed to tear down repo-scoped connection",{childConnectionId:Y,error:Q.message})}return{item:X}}})});import{z as jX}from"zod";var Be8,Od0;var ae1=O(()=>{Y1();Be8=jX.object({id:jX.string(),virtualMcpId:jX.string(),pluginId:jX.string(),connectionId:jX.string().nullable(),settings:jX.record(jX.string(),jX.unknown()).nullable(),createdAt:jX.string(),updatedAt:jX.string()}),Od0=$0({name:"VIRTUAL_MCP_PLUGIN_CONFIG_GET",description:"Get a plugin's current configuration for a specific virtual MCP.",annotations:{title:"Get Virtual MCP Plugin Config",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:jX.object({virtualMcpId:jX.string().describe("Virtual MCP ID"),pluginId:jX.string().describe("Plugin ID")}),outputSchema:jX.object({config:Be8.nullable()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let{virtualMcpId:G,pluginId:X}=$,Y=await Z.storage.virtualMcpPluginConfigs.get(G,X);if(!Y)return{config:null};return{config:{id:Y.id,virtualMcpId:Y.virtualMcpId,pluginId:Y.pluginId,connectionId:Y.connectionId,settings:Y.settings,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt,updatedAt:Y.updatedAt instanceof Date?Y.updatedAt.toISOString():Y.updatedAt}}}})});import{z as kZ}from"zod";var Oe8,Dd0;var se1=O(()=>{Y1();fb();OG();Oe8=kZ.object({id:kZ.string(),virtualMcpId:kZ.string(),pluginId:kZ.string(),connectionId:kZ.string().nullable(),settings:kZ.record(kZ.string(),kZ.unknown()).nullable(),createdAt:kZ.string(),updatedAt:kZ.string()}),Dd0=$0({name:"VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE",description:"Set or update a plugin's configuration for a specific virtual MCP.",annotations:{title:"Update Virtual MCP Plugin Config",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:kZ.object({virtualMcpId:kZ.string().describe("Virtual MCP ID"),pluginId:kZ.string().describe("Plugin ID"),connectionId:kZ.string().nullable().optional().describe("MCP connection to bind"),settings:kZ.record(kZ.string(),kZ.unknown()).nullable().optional().describe("Plugin-specific settings")}),outputSchema:kZ.object({config:Oe8}),handler:async($,Z)=>{M0(Z),await Z.access.check();let{virtualMcpId:G,pluginId:X,connectionId:Y,settings:Q}=$,J=y1(Z),W=await Z.storage.connections.findById(G);if(!W)throw Error(`Connection not found: ${G}`);let K=Y?await Z.storage.connections.findById(Y):null;if(Y&&W.organization_id&&!K&&f3()){if(d10(Y,W.organization_id)){if(!J)throw Error("User ID required to create dev-assets connection");let U=bb(W.organization_id,jZ());await Z.storage.connections.create({...U,organization_id:W.organization_id,created_by:J})}}let w=await Z.storage.virtualMcpPluginConfigs.upsert(G,X,{connectionId:Y,settings:Q});return{config:{id:w.id,virtualMcpId:w.virtualMcpId,pluginId:w.pluginId,connectionId:w.connectionId,settings:w.settings,createdAt:w.createdAt instanceof Date?w.createdAt.toISOString():w.createdAt,updatedAt:w.updatedAt instanceof Date?w.updatedAt.toISOString():w.updatedAt}}}})});import{z as CG}from"zod";var De8,Ed0;var ee1=O(()=>{Y1();QH();De8=CG.object({connectionId:CG.string(),toolName:CG.string(),label:CG.string(),icon:CG.string().nullable().optional()}),Ed0=$0({name:"VIRTUAL_MCP_PINNED_VIEWS_UPDATE",description:"Update the pinned sidebar views for a virtual MCP. Replaces all current pins.",annotations:{title:"Update Pinned Views",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:CG.object({virtualMcpId:CG.string().describe("Virtual MCP ID"),pinnedViews:CG.array(De8).describe("Pinned views to set for the virtual MCP sidebar"),layout:CG.object({defaultMainView:CG.object({type:CG.string(),id:CG.string().optional(),toolName:CG.string().optional()}).nullable().optional(),chatDefaultOpen:CG.boolean().nullable().optional()}).optional()}),outputSchema:CG.object({item:sZ.nullable()}),handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let{virtualMcpId:X,pinnedViews:Y,layout:Q}=$,J=y1(Z),W=await Z.storage.virtualMcps.findById(X);if(!W)throw Error(`Virtual MCP not found: ${X}`);if(W.organization_id!==G.id)throw Error(`Virtual MCP not found: ${X}`);let K=W.metadata?.ui??{},w={...K,pinnedViews:Y.length>0?Y:null,layout:Q??K.layout??null};return{item:await Z.storage.virtualMcps.update(X,J??"system",{metadata:{...W.metadata,ui:w}})}}})});import{z as nw}from"zod";var Ee8,Le8,Ld0;var $0$=O(()=>{Y1();Ee8=nw.object({ids:nw.array(nw.string()).describe("Virtual MCP ids to look up")}),Le8=nw.object({items:nw.array(nw.object({id:nw.string(),last_used_at:nw.string().optional(),last_used_by:nw.string().optional()}))}),Ld0=$0({name:"VIRTUAL_MCP_LAST_USED_LIST",description:"Get last-used info (timestamp + user) for one or more virtual MCPs, derived from the most recent thread per agent.",annotations:{title:"List Virtual MCP Last Used",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Ee8,outputSchema:Le8,handler:async($,Z)=>{M0(Z),O0(Z),await Z.access.check();let G=await Z.storage.threads.findLastUsedByVirtualMcpIds($.ids);return{items:$.ids.map((X)=>({id:X,last_used_at:G.get(X)?.last_used_at,last_used_by:G.get(X)?.last_used_by}))}}})});var Z0$=O(()=>{ne1();pe1();te1();re1();oe1();ae1();se1();ee1();$0$()});import{z as w5}from"zod";var zd0;var G0$=O(()=>{B5();Y1();zd0=$0({name:"MONITORING_LOG_GET",description:"Get a single monitoring log by ID with full input and output data.",annotations:{title:"Get Monitoring Log",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:w5.object({id:w5.string().describe("Log ID to fetch")}),outputSchema:w5.object({log:w5.object({id:w5.string().optional(),organizationId:w5.string(),connectionId:w5.string(),toolName:w5.string(),input:w5.record(w5.string(),w5.unknown()),output:w5.record(w5.string(),w5.unknown()),isError:w5.boolean(),errorMessage:w5.string().nullish(),durationMs:w5.number(),timestamp:w5.string(),userId:w5.string().nullish(),requestId:w5.string(),userAgent:w5.string().nullish(),virtualMcpId:w5.string().nullish(),properties:w5.record(w5.string(),w5.string()).nullish()}).nullable().describe("The monitoring log, or null if not found")}),handler:async($,Z)=>{await Z.access.check(),await mY();let G=O0(Z),X=await Z.storage.monitoring.getById(G.id,$.id);if(!X)return{log:null};return{log:{...X,timestamp:X.timestamp instanceof Date?X.timestamp.toISOString():X.timestamp}}}})});import{z as B8}from"zod";var je8,jd0;var X0$=O(()=>{B5();Y1();je8=B8.object({id:B8.string().optional().describe("Unique log identifier"),organizationId:B8.string().describe("Organization ID"),connectionId:B8.string().describe("Connection ID"),toolName:B8.string().describe("Name of the tool that was called"),isError:B8.boolean().describe("Whether the call resulted in an error"),errorMessage:B8.string().nullish().describe("Error message if applicable"),durationMs:B8.number().describe("Call duration in milliseconds"),timestamp:B8.string().describe("ISO 8601 timestamp of the call"),userId:B8.string().nullish().describe("User who triggered the call"),requestId:B8.string().describe("Unique request identifier"),userAgent:B8.string().nullish().describe("Client identifier (x-mesh-client header)"),virtualMcpId:B8.string().nullish().describe("Virtual MCP (Agent) ID if routed through an agent"),properties:B8.record(B8.string(),B8.string()).nullish().describe("Custom key-value metadata attached to the log")}),jd0=$0({name:"MONITORING_LOGS_LIST",description:"List monitoring logs for tool calls with filtering and pagination.",annotations:{title:"List Monitoring Logs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:B8.object({connectionId:B8.string().optional().describe("Filter by connection ID"),excludeConnectionIds:B8.array(B8.string()).optional().describe("Exclude logs from these connection IDs (e.g. system connections)"),virtualMcpId:B8.string().optional().describe("Filter by Virtual MCP (Agent) ID"),toolName:B8.string().optional().describe("Filter by tool name"),isError:B8.boolean().optional().describe("Filter by error status"),startDate:B8.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:B8.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)"),limit:B8.number().default(20).describe("Maximum number of results"),offset:B8.number().default(0).describe("Offset for pagination"),properties:B8.record(B8.string(),B8.string()).optional().describe("Filter by exact property key=value matches"),propertyKeys:B8.array(B8.string()).optional().describe("Filter by logs that have these property keys"),propertyPatterns:B8.record(B8.string(),B8.string()).optional().describe("Filter by property value patterns (SQL LIKE, use % as wildcard)"),propertyInValues:B8.record(B8.string(),B8.string()).optional().describe("Filter by exact match within comma-separated values (e.g., user_tags in 'Engineering')")}),outputSchema:B8.object({logs:B8.array(je8).describe("Array of monitoring logs"),total:B8.number().describe("Total number of logs matching filters"),offset:B8.number().describe("Current offset for pagination"),limit:B8.number().describe("Current limit for pagination")}),handler:async($,Z)=>{await mY();let G=O0(Z),Y=$.properties||$.propertyKeys||$.propertyPatterns||$.propertyInValues?{properties:$.properties,propertyKeys:$.propertyKeys,propertyPatterns:$.propertyPatterns,propertyInValues:$.propertyInValues}:void 0,Q={organizationId:G.id,connectionId:$.connectionId,excludeConnectionIds:$.excludeConnectionIds,virtualMcpId:$.virtualMcpId,toolName:$.toolName,isError:$.isError,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,limit:$.limit,offset:$.offset,propertyFilters:Y},J=await Z.storage.monitoring.query(Q);return{logs:J.logs.map(({input:W,output:K,...w})=>({...w,timestamp:w.timestamp instanceof Date?w.timestamp.toISOString():w.timestamp})),total:J.total,offset:$.offset,limit:$.limit}}})});import{z as U$}from"zod";var Pd0;var Y0$=O(()=>{B5();Y1();Pd0=$0({name:"MONITORING_STATS",description:"Get aggregated statistics (counts, latency, error rates) for tool call monitoring.",annotations:{title:"Get Monitoring Stats",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:U$.object({startDate:U$.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:U$.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)"),interval:U$.string().regex(/^\d+[mhd]$/).optional().describe("Bucket interval for timeseries data (e.g. 1m, 5m, 2h, 1d). When provided, returns timeseries array."),connectionIds:U$.array(U$.string()).max(100).optional().describe("Filter by specific connection IDs (max 100)"),excludeConnectionIds:U$.array(U$.string()).max(100).optional().describe("Exclude specific connection IDs (max 100)"),toolNames:U$.array(U$.string()).max(100).optional().describe("Filter by specific tool names (max 100)"),status:U$.enum(["success","error"]).optional().describe("Filter metrics by execution status"),topN:U$.number().int().min(1).max(20).optional().describe("When provided with interval, also return top tools and their timeseries"),userIds:U$.array(U$.string()).max(100).optional().describe("Filter LLM usage by user IDs (only applied when llmUsage is true)"),llmUsage:U$.boolean().optional().describe("Aggregate LLM-call usage (tokens + USD cost) from raw log rows for the given connection. Returns token/cost totals and timeseries. Requires interval.")}),outputSchema:U$.object({totalCalls:U$.number().describe("Total number of tool calls"),errorRate:U$.number().optional().describe("Error rate as a decimal (0 to 1)"),avgDurationMs:U$.number().describe("Average call duration in milliseconds"),errorRatePercent:U$.string().optional().describe("Error rate as a percentage string"),totalErrors:U$.number().optional().describe("Total number of errors"),p50DurationMs:U$.number().optional().describe("50th percentile duration in milliseconds"),p95DurationMs:U$.number().optional().describe("95th percentile duration in milliseconds"),connectionBreakdown:U$.array(U$.object({connectionId:U$.string(),calls:U$.number(),errors:U$.number(),errorRate:U$.number(),avgDurationMs:U$.number()})).optional().describe("Per-connection metric breakdown"),totalInputTokens:U$.number().optional().describe("Total input tokens (LLM usage mode)"),totalOutputTokens:U$.number().optional().describe("Total output tokens (LLM usage mode)"),totalTokens:U$.number().optional().describe("Total tokens (LLM usage mode)"),totalCostUsd:U$.number().optional().describe("Total USD cost (LLM usage mode; only non-zero for providers that report cost)"),topTools:U$.array(U$.object({toolName:U$.string(),connectionId:U$.string().nullable(),calls:U$.number(),inputTokens:U$.number().optional(),outputTokens:U$.number().optional(),costUsd:U$.number().optional()})).optional().describe("Top tools ranked by calls"),topToolsTimeseries:U$.array(U$.object({timestamp:U$.string(),toolName:U$.string(),calls:U$.number(),errors:U$.number(),avg:U$.number(),p95:U$.number()})).optional().describe("Per-tool metric timeseries for the top tools"),timeseries:U$.array(U$.object({timestamp:U$.string(),calls:U$.number(),errors:U$.number(),errorRate:U$.number(),avg:U$.number(),p50:U$.number(),p95:U$.number(),inputTokens:U$.number().optional(),outputTokens:U$.number().optional(),totalTokens:U$.number().optional(),costUsd:U$.number().optional()})).optional().describe("Timeseries data points bucketed by interval")}),handler:async($,Z)=>{let G=O0(Z);if(await Z.access.check(),await mY(),$.interval&&$.llmUsage)return Z.storage.monitoring.queryLlmUsageStats({organizationId:G.id,interval:$.interval,connectionId:$.connectionIds?.[0]??"decopilot",startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,userIds:$.userIds,topN:$.topN});if($.interval){let Y=await Z.storage.monitoring.queryMetricTimeseries({organizationId:G.id,interval:$.interval,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,filters:{connectionIds:$.connectionIds,excludeConnectionIds:$.excludeConnectionIds,toolNames:$.toolNames,status:$.status}});if(!$.topN)return Y;let Q=await Z.storage.monitoring.queryMetricTopToolsTimeseries({organizationId:G.id,interval:$.interval,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,topN:$.topN,filters:{connectionIds:$.connectionIds,excludeConnectionIds:$.excludeConnectionIds,toolNames:$.toolNames,status:$.status}});return{...Y,topTools:Q.topTools,topToolsTimeseries:Q.timeseries}}let X=await Z.storage.monitoring.getStats({organizationId:G.id,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0});return{...X,errorRatePercent:(X.errorRate*100).toFixed(2)}}})});import{z as _G}from"zod";var Ad0;var Q0$=O(()=>{B5();Y1();Ad0=$0({name:"MONITORING_THREAD_USAGE",description:"Aggregate LLM token usage and USD cost per thread for the given thread IDs.",annotations:{title:"Get Thread Usage",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:_G.object({threadIds:_G.array(_G.string()).min(1).max(500).describe("Thread IDs to aggregate usage for (max 500)"),connectionId:_G.string().optional().describe("LLM connection ID (defaults to 'decopilot')"),startDate:_G.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:_G.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)")}),outputSchema:_G.object({items:_G.array(_G.object({threadId:_G.string(),calls:_G.number(),inputTokens:_G.number(),outputTokens:_G.number(),totalTokens:_G.number(),costUsd:_G.number()}))}),handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),await mY(),{items:await Z.storage.monitoring.queryThreadUsage({organizationId:G.id,connectionId:$.connectionId??"decopilot",threadIds:$.threadIds,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0})}}})});var J0$=O(()=>{G0$();X0$();Y0$();Q0$()});function k50($){return typeof $==="string"&&Ae8.has($.trim().toLowerCase())}var Ae8;var Td0=O(()=>{Ae8=new Set([".well-known","_admin","api","auth","cli","commerce-onboarding","dbos-queue-depth","health","hosted-run-pending","login","mcp","metrics","oauth","oauth-proxy","onboarding","org","report","reset-password"])});import{z as IY}from"zod";var Id0;var W0$=O(()=>{Y1();Td0();Id0=$0({name:"ORGANIZATION_CREATE",description:"Create a new organization. The caller becomes the owner automatically.",annotations:{title:"Create Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:IY.object({slug:IY.string().min(1).max(50).regex(/^[a-z0-9-]+$/,"Slug must be lowercase alphanumeric with hyphens").refine(($)=>!k50($),"Slug is reserved by Studio"),name:IY.string().min(1).max(255),description:IY.string().optional()}),outputSchema:IY.object({id:IY.string(),name:IY.string(),slug:IY.string(),logo:IY.string().nullable().optional(),metadata:IY.any().optional(),createdAt:IY.string().datetime().describe("ISO 8601 timestamp"),members:IY.array(IY.any()).optional()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=y1(Z);if(!G)throw Error("User ID required to create organization");let X=await Z.boundAuth.organization.create({name:$.name,slug:$.slug,metadata:$.description?{description:$.description}:void 0,userId:G});if(!X)throw Error("Failed to create organization");return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as WJ}from"zod";var Rd0;var K0$=O(()=>{Y1();Rd0=$0({name:"ORGANIZATION_LIST",description:"List organizations the current user belongs to.",annotations:{title:"List Organizations",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},_meta:{ui:{visibility:"app"}},inputSchema:WJ.object({userId:WJ.string().optional()}),outputSchema:WJ.object({organizations:WJ.array(WJ.object({id:WJ.string(),name:WJ.string(),slug:WJ.string(),logo:WJ.string().nullable().optional(),metadata:WJ.any().optional(),createdAt:WJ.string().datetime().describe("ISO 8601 timestamp")}))}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=y1(Z),X=$.userId||G;if(!X)throw Error("User ID required to list organizations");return{organizations:(await Z.boundAuth.organization.list(X)).map((Q)=>({...Q,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});import{z as VQ}from"zod";var qd0;var w0$=O(()=>{Y1();qd0=$0({name:"ORGANIZATION_GET",description:"Get an organization's details, members, and settings by slug or ID.",annotations:{title:"Get Organization",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:VQ.object({}),outputSchema:VQ.object({id:VQ.string(),name:VQ.string(),slug:VQ.string(),logo:VQ.string().nullable().optional(),metadata:VQ.any().optional(),createdAt:VQ.string().datetime().describe("ISO 8601 timestamp"),members:VQ.array(VQ.any()).optional(),invitations:VQ.array(VQ.any()).optional()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.boundAuth.organization.get(G);if(!X)throw Error("No active organization found");let Y=new Date,Q=X.invitations?.filter((J)=>new Date(J.expiresAt)>Y);return{...X,invitations:Q,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as KJ}from"zod";var Md0;var U0$=O(()=>{Y1();Md0=$0({name:"ORGANIZATION_UPDATE",description:"Update an organization's name or description.",annotations:{title:"Update Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:KJ.object({id:KJ.string(),name:KJ.string().min(1).max(255).optional(),description:KJ.string().optional()}),outputSchema:KJ.object({id:KJ.string(),name:KJ.string(),slug:KJ.string(),logo:KJ.string().nullable().optional(),metadata:KJ.any().optional(),createdAt:KJ.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G={};if($.name)G.name=$.name;if($.description)G.metadata={description:$.description};let X=await Z.boundAuth.organization.update({organizationId:$.id,data:G});if(!X)throw Error("Failed to update organization");return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as ti}from"zod";var kd0;var F0$=O(()=>{Y1();kd0=$0({name:"ORGANIZATION_DELETE",description:"Archive an organization (soft delete).",annotations:{title:"Delete Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:ti.object({id:ti.string()}),outputSchema:ti.object({success:ti.boolean(),id:ti.string()}),handler:async($,Z)=>{return M0(Z),await Z.access.check(),await Z.boundAuth.organization.update({organizationId:$.id,data:{metadata:{archived:!0,archivedAt:new Date().toISOString()}}}),{success:!0,id:$.id}}})});import{z as h$}from"zod";var ri,oi,wv,H0$,S50,ai,si,UN;var pw=O(()=>{ri=h$.object({title:h$.string(),url:h$.string(),icon:h$.string()}),oi=h$.object({registries:h$.record(h$.string(),h$.object({enabled:h$.boolean()})).describe("Per-registry enabled/disabled state. Key is connection ID. Absent registries are treated as enabled."),blockedMcps:h$.array(h$.string()).describe("List of MCP app_name or app_id values to hide from the store.")}),wv=h$.object({keyId:h$.string(),modelId:h$.string(),title:h$.string().optional()}).nullable(),H0$=h$.enum(["fast","smart","thinking","image","web_search","deep_research"]),S50=h$.enum(["fast","smart","thinking"]),ai=h$.object({tiers:h$.object({fast:wv,smart:wv,thinking:wv,image:wv,web_search:wv,deep_research:wv})}),si=h$.object({ids:h$.array(h$.string()).describe("Ordered list of custom virtual MCP agent ids to show on the home view.")}),UN=h$.object({id:h$.string().describe("Brand context ID"),name:h$.string().describe("Company name"),domain:h$.string().describe("Company domain (e.g. example.com)"),overview:h$.string().describe("Company overview / description"),logo:h$.string().nullable().optional().describe("Logo URL"),favicon:h$.string().nullable().optional().describe("Favicon URL"),ogImage:h$.string().nullable().optional().describe("OG image URL"),fonts:h$.object({heading:h$.string().optional().describe("Font family for headings"),body:h$.string().optional().describe("Font family for body text"),code:h$.string().optional().describe("Font family for code / monospace")}).nullable().optional().describe("Font families by semantic role"),colors:h$.object({primary:h$.string().optional().describe("Primary brand color (hex)"),secondary:h$.string().optional().describe("Secondary brand color (hex)"),accent:h$.string().optional().describe("Accent / highlight color (hex)"),background:h$.string().optional().describe("Background color (hex)"),foreground:h$.string().optional().describe("Foreground / text color (hex)")}).nullable().optional().describe("Semantic color palette"),images:h$.array(h$.record(h$.string(),h$.unknown())).nullable().optional().describe("Brand images"),metadata:h$.record(h$.string(),h$.unknown()).nullable().optional().describe("Extra design tokens (typography, components, spacing, layout, tone, etc.)"),archivedAt:h$.string().nullable().optional().describe("Archive timestamp (null to unarchive)"),isDefault:h$.boolean().optional().describe("Whether this is the default brand for the organization")})});import{z as xW}from"zod";var Sd0;var N0$=O(()=>{Y1();pw();Sd0=$0({name:"ORGANIZATION_SETTINGS_GET",description:"Get organization-level settings including sidebar configuration, store registry settings, simple model mode, and default home agents.",annotations:{title:"Get Organization Settings",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:xW.object({}),outputSchema:xW.object({organizationId:xW.string(),sidebar_items:xW.array(ri).nullable().optional(),enabled_plugins:xW.array(xW.string()).nullable().optional(),registry_config:oi.nullable().optional(),simple_mode:ai.nullable().optional(),default_home_agents:si.nullable().optional(),reports_only:xW.boolean().nullable().optional(),task_board_enabled:xW.boolean().optional(),createdAt:xW.string().datetime().optional().describe("ISO 8601 timestamp"),updatedAt:xW.string().datetime().optional().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.organizationSettings.get(G);if(!X)return{organizationId:G};return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}})});import{z as p7}from"zod";var Vd0;var B0$=O(()=>{Y1();pw();Vd0=$0({name:"ORGANIZATION_SETTINGS_UPDATE",description:"Update organization-level settings such as sidebar configuration, store registry settings, simple model mode, and default home agents.",annotations:{title:"Update Organization Settings",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:p7.object({organizationId:p7.string(),sidebar_items:p7.array(ri).optional(),enabled_plugins:p7.array(p7.string()).optional(),registry_config:oi.optional(),simple_mode:ai.optional(),default_home_agents:si.optional(),reports_only:p7.boolean().optional(),task_board_enabled:p7.boolean().optional()}),outputSchema:p7.object({organizationId:p7.string(),sidebar_items:p7.array(ri).nullable().optional(),enabled_plugins:p7.array(p7.string()).nullable().optional(),registry_config:oi.nullable().optional(),simple_mode:ai.nullable().optional(),default_home_agents:si.nullable().optional(),reports_only:p7.boolean().nullable().optional(),task_board_enabled:p7.boolean().optional(),createdAt:p7.string().datetime().describe("ISO 8601 timestamp"),updatedAt:p7.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{if(M0(Z),await Z.access.check(),Z.organization&&Z.organization.id!==$.organizationId)throw Error("Cannot update settings for a different organization");let G=await Z.storage.organizationSettings.upsert($.organizationId,{sidebar_items:$.sidebar_items,enabled_plugins:$.enabled_plugins,registry_config:$.registry_config,simple_mode:$.simple_mode,default_home_agents:$.default_home_agents,reports_only:$.reports_only,task_board_enabled:$.task_board_enabled});return{...G,createdAt:G.createdAt instanceof Date?G.createdAt.toISOString():G.createdAt,updatedAt:G.updatedAt instanceof Date?G.updatedAt.toISOString():G.updatedAt}}})});import{z as wJ}from"zod";var O0$,Cd0,_d0;var D0$=O(()=>{Y1();pw();O0$=UN.extend({organizationId:wJ.string(),archivedAt:wJ.string().nullable().optional().describe("ISO 8601 timestamp"),createdAt:wJ.string().describe("ISO 8601 timestamp"),updatedAt:wJ.string().describe("ISO 8601 timestamp")}),Cd0=$0({name:"BRAND_CONTEXT_LIST",description:"List all brand contexts (company profiles) for the current organization.",annotations:{title:"List Brand Contexts",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:wJ.object({includeArchived:wJ.boolean().optional().describe("Include archived brands in the list")}),outputSchema:wJ.object({items:wJ.array(O0$)}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");return{items:(await Z.storage.brandContext.list(G,{includeArchived:$.includeArchived})).map((Y)=>({...Y,archivedAt:Y.archivedAt instanceof Date?Y.archivedAt.toISOString():Y.archivedAt,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt,updatedAt:Y.updatedAt instanceof Date?Y.updatedAt.toISOString():Y.updatedAt}))}}}),_d0=$0({name:"BRAND_CONTEXT_GET",description:"Get a specific brand context by ID.",annotations:{title:"Get Brand Context",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:wJ.object({id:wJ.string().describe("Brand context ID")}),outputSchema:O0$.extend({organizationId:wJ.string()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.brandContext.get($.id,G);if(!X)throw Error("Brand context not found");return{...X,archivedAt:X.archivedAt instanceof Date?X.archivedAt.toISOString():X.archivedAt,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}})});import{z as AE}from"zod";var E0$,bd0,fd0,xd0;var L0$=O(()=>{Y1();pw();E0$=UN.extend({organizationId:AE.string(),createdAt:AE.string().describe("ISO 8601 timestamp"),updatedAt:AE.string().describe("ISO 8601 timestamp")}),bd0=$0({name:"BRAND_CONTEXT_CREATE",description:"Create a new brand context (company profile) for the current organization.",annotations:{title:"Create Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!1},inputSchema:UN.omit({id:!0}),outputSchema:E0$,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.brandContext.create(G,{name:$.name,domain:$.domain,overview:$.overview,logo:$.logo??null,favicon:$.favicon??null,ogImage:$.ogImage??null,fonts:$.fonts??null,colors:$.colors??null,images:$.images??null,metadata:$.metadata??null});return{...X,archivedAt:X.archivedAt instanceof Date?X.archivedAt.toISOString():X.archivedAt,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}}),fd0=$0({name:"BRAND_CONTEXT_UPDATE",description:"Update an existing brand context by ID.",annotations:{title:"Update Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:UN.partial().required({id:!0}),outputSchema:E0$,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!await Z.storage.brandContext.get($.id,G))throw Error("Brand context not found");let{id:Y,...Q}=$;if(Q.isDefault===!0)await Z.storage.brandContext.setDefault(Y,G);let J=await Z.storage.brandContext.update(Y,G,{name:Q.name,domain:Q.domain,overview:Q.overview,logo:Q.logo!==void 0?Q.logo??null:void 0,favicon:Q.favicon!==void 0?Q.favicon??null:void 0,ogImage:Q.ogImage!==void 0?Q.ogImage??null:void 0,fonts:Q.fonts!==void 0?Q.fonts??null:void 0,colors:Q.colors!==void 0?Q.colors??null:void 0,images:Q.images!==void 0?Q.images??null:void 0,metadata:Q.metadata!==void 0?Q.metadata??null:void 0,archivedAt:Q.archivedAt!==void 0?Q.archivedAt??null:void 0,isDefault:Q.isDefault===!1?!1:void 0});return{...J,archivedAt:J.archivedAt instanceof Date?J.archivedAt.toISOString():J.archivedAt,createdAt:J.createdAt instanceof Date?J.createdAt.toISOString():J.createdAt,updatedAt:J.updatedAt instanceof Date?J.updatedAt.toISOString():J.updatedAt}}}),xd0=$0({name:"BRAND_CONTEXT_DELETE",description:"Archive a brand context by ID (soft delete).",annotations:{title:"Archive Brand Context",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:AE.object({id:AE.string().describe("Brand context ID")}),outputSchema:AE.object({success:AE.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!await Z.storage.brandContext.get($.id,G))throw Error("Brand context not found");return await Z.storage.brandContext.update($.id,G,{archivedAt:new Date().toISOString(),isDefault:!1}),{success:!0}}})});async function V50($,Z,G){let X=$.trim();if(!X.startsWith("http"))X=`https://${X}`;let Y=await fetch("https://api.firecrawl.dev/v1/scrape",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${Z}`},body:JSON.stringify({url:X,formats:["branding"]})});if(!Y.ok){let H=await Y.text().catch(()=>"");throw Error(`Firecrawl API error: ${Y.status} ${H.slice(0,200)}`)}let Q=await Y.json();if(!Q.success||!Q.data?.branding)return null;let J=Q.data.branding,W=Q.data.metadata??{},K=Re8(J,W);return{name:W.title?.split(/[|\u2013\u2014]|\s+-\s+/).map((H)=>H.trim()).filter(Boolean)?.slice().sort((H,N)=>H.length-N.length)[0]??W.ogSiteName??G??$,domain:$,overview:W.description??"",logo:K.logo,favicon:K.favicon,ogImage:K.ogImage,fonts:K.fonts,colors:K.colors,images:null,metadata:Object.keys(K.metadata).length>0?K.metadata:null}}function Re8($,Z){let G=$.images??{},X=$.colors??{},Y={};for(let[U,F]of Object.entries(X))if(typeof F==="string"&&F&&Te8.has(U))Y[U]=F;let Q={},W=($.typography??{}).fontFamilies??{};for(let[U,F]of Object.entries(W))if(typeof F==="string"&&F){let H=Ie8[U.toLowerCase()];if(H&&!Q[H])Q[H]=F}let K=$.fonts;if(Array.isArray(K))for(let U of K){let F=U.family;if(typeof F==="string"&&F&&!Q.body)Q.body=F}let w={};for(let U of["typography","components","spacing","layout","animations","icons","tone","personality","colorScheme"])if($[U]!==void 0)w[U]=$[U];return{logo:G.logo??null,favicon:G.favicon??null,ogImage:G.ogImage??Z.ogImage??null,fonts:Object.keys(Q).length>0?Q:null,colors:Object.keys(Y).length>0?Y:null,metadata:w}}var Te8,Ie8;var vd0=O(()=>{Te8=new Set(["primary","secondary","accent","background","foreground"]),Ie8={heading:"heading",headings:"heading",head:"heading",title:"heading",body:"body",primary:"body",text:"body",code:"code",monospace:"code",mono:"code"}});import{z as C50}from"zod";var qe8,yd0;var z0$=O(()=>{Y1();vd0();pw();qe8=UN.pick({id:!0,name:!0,domain:!0,overview:!0,logo:!0,favicon:!0,ogImage:!0,fonts:!0,colors:!0}).extend({success:C50.boolean()}),yd0=$0({name:"BRAND_CONTEXT_EXTRACT",description:"Extract brand context (colors, fonts, logos) from a website URL using Firecrawl.",annotations:{title:"Extract Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:C50.object({domain:C50.string().describe("Website domain to extract brand from"),brandId:C50.string().optional().describe("Existing brand context ID to update (creates new if omitted)")}),outputSchema:qe8,modelSummary:($)=>$.success?`Brand saved (id=${$.id}, name=${$.name}, domain=${$.domain}). The UI rendered the logo, colors, fonts, and overview.`:"Brand extraction failed.",handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=Z.firecrawlApiKey;if(!X)throw Error("FIRECRAWL_API_KEY is not configured. Set the environment variable to enable brand extraction.");let Y=await V50($.domain,X,$.domain);if(!Y)throw Error("Firecrawl did not return branding data for this URL");let Q={name:Y.name,domain:Y.domain,overview:Y.overview,logo:Y.logo,favicon:Y.favicon,ogImage:Y.ogImage,fonts:Y.fonts,colors:Y.colors,images:Y.images,metadata:Y.metadata},J=$.brandId?await(async()=>{if(!await Z.storage.brandContext.get($.brandId,G))throw Error("Brand context not found");return Z.storage.brandContext.update($.brandId,G,Q)})():await Z.storage.brandContext.create(G,Q);return{id:J.id,name:J.name,domain:J.domain,overview:J.overview,logo:J.logo,favicon:J.favicon,ogImage:J.ogImage,fonts:J.fonts,colors:J.colors,success:!0}}})});function j0$($){let Z=$.metadata??{};return{id:$.id,name:$.name,domain:$.domain||void 0,colors:$.colors??void 0,fonts:$.fonts??void 0,assets:$.logo||$.favicon||$.ogImage?{logo:$.logo??void 0,favicon:$.favicon??void 0,ogImage:$.ogImage??void 0}:void 0,overview:$.overview||void 0,tagline:typeof Z.tagline==="string"?Z.tagline:void 0,tone:typeof Z.tone==="string"?Z.tone:void 0,metadata:(()=>{let G=Object.fromEntries(Object.entries(Z).filter(([X])=>X!=="tagline"&&X!=="tone"));return Object.keys(G).length>0?G:void 0})()}}var gd0,hd0;var P0$=O(()=>{au0();Y1();gd0=$0({name:"BRAND_GET",description:"Get a brand context by ID. Omit the ID to get the default brand for the organization.",annotations:{title:"Get Brand",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:j50,outputSchema:ii,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=$.id?await Z.storage.brandContext.get($.id,G):await Z.storage.brandContext.getDefault(G);if(!X)throw Error($.id?"Brand not found":"No default brand configured");return j0$(X)}}),hd0=$0({name:"BRAND_LIST",description:"List all active brands for the current organization.",annotations:{title:"List Brands",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:P50,outputSchema:A50,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");return{items:(await Z.storage.brandContext.list(G)).map(j0$)}}})});import{resolveTxt as Me8}from"dns/promises";function cd0($){return`${ke8}.${$.toLowerCase()}`}function A0$(){return`deco-verify-${crypto.randomUUID().replace(/-/g,"")}`}async function T0$($,Z,G=Me8){if(!Z)return!1;try{return(await G(cd0($))).some((Y)=>Y.join("").trim()===Z)}catch{return!1}}var ke8="_deco-verify";var I0$=()=>{};import{z as T5}from"zod";function FN($){let Z=$.verificationStatus==="pending"&&Boolean($.verificationToken);return{id:$.id,domain:$.domain,joinMode:$.joinMode,verificationStatus:$.verificationStatus,verificationMethod:$.verificationMethod,verifiedAt:$.verifiedAt?new Date($.verifiedAt).toISOString():null,recordName:Z?cd0($.domain):null,recordValue:Z?$.verificationToken:null}}function Ve8($){let Z=$.toLowerCase().trim();if(!Se8.test(Z))throw Error(`Invalid domain format: "${Z}". Must be a valid domain like "acme.com"`);if(UJ.has(Z))throw Error(`Cannot claim generic email domain "${Z}". Only corporate domains are allowed.`);return Z}var Se8,ud0,_50,dd0,ld0,md0,id0,nd0;var R0$=O(()=>{CQ();I0$();Y1();Se8=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/,ud0=T5.enum(["off","auto","request"]),_50=T5.object({id:T5.string(),domain:T5.string(),joinMode:ud0,verificationStatus:T5.enum(["pending","verified"]),verificationMethod:T5.enum(["email","dns"]).nullable(),verifiedAt:T5.string().nullable(),recordName:T5.string().nullable(),recordValue:T5.string().nullable()});dd0=$0({name:"ORGANIZATION_DOMAIN_LIST",description:"List the email domains claimed by an organization.",annotations:{title:"List Organization Domains",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:T5.object({}),outputSchema:T5.object({domains:T5.array(_50)}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z);return{domains:(await Z.storage.organizationDomains.listByOrganizationId(G.id)).map(FN)}}}),ld0=$0({name:"ORGANIZATION_DOMAIN_ADD",description:"Claim an email domain for an organization. If the caller's verified email matches the domain it is trusted immediately; otherwise it requires DNS verification.",annotations:{title:"Add Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:T5.object({domain:T5.string().min(1).max(255).describe("Domain to claim, e.g. acme.com"),joinMode:ud0.optional().describe("Initial join mode (only applied when the domain is trusted immediately via email match).")}),outputSchema:_50,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=Ve8($.domain),Q=Z.auth.user?.email?.split("@")[1]?.toLowerCase(),J=Boolean(Z.auth.user?.emailVerified)&&Q===X,W=await Z.storage.organizationDomains.getByOrgAndDomain(G.id,X);if(W){if(W.verificationStatus!=="verified"&&J){let w=await Z.storage.organizationDomains.markVerified(W.id,"email");return FN(w)}return FN(W)}let K=J?await Z.storage.organizationDomains.add(G.id,X,{joinMode:$.joinMode??"off",verificationStatus:"verified",verificationMethod:"email"}):await Z.storage.organizationDomains.add(G.id,X,{joinMode:"off",verificationStatus:"pending",verificationToken:A0$()});return FN(K)}}),md0=$0({name:"ORGANIZATION_DOMAIN_UPDATE",description:"Set the join mode for a claimed domain. Discoverable modes (auto/request) require the domain to be verified.",annotations:{title:"Update Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:T5.object({id:T5.string(),joinMode:ud0}),outputSchema:_50,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");if($.joinMode!=="off"&&X.verificationStatus!=="verified")throw Error("Verify the domain before enabling auto-join or requests.");let Y=await Z.storage.organizationDomains.updateJoinMode($.id,$.joinMode);return FN(Y)}}),id0=$0({name:"ORGANIZATION_DOMAIN_VERIFY",description:"Check the DNS TXT record for a pending domain and mark it verified if present.",annotations:{title:"Verify Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:T5.object({id:T5.string()}),outputSchema:T5.object({verified:T5.boolean(),domain:_50}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");if(X.verificationStatus==="verified")return{verified:!0,domain:FN(X)};if(!X.verificationToken)throw Error("Domain has no pending DNS verification.");if(!await T0$(X.domain,X.verificationToken))return{verified:!1,domain:FN(X)};let Q=await Z.storage.organizationDomains.markVerified($.id,"dns");return{verified:!0,domain:FN(Q)}}}),nd0=$0({name:"ORGANIZATION_DOMAIN_REMOVE",description:"Remove a claimed domain from an organization.",annotations:{title:"Remove Organization Domain",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:T5.object({id:T5.string()}),outputSchema:T5.object({success:T5.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");return await Z.storage.organizationDomains.removeById($.id),{success:!0}}})});function HN($){return($ instanceof Error?$.message.toLowerCase():"").includes("already a member")}import{z as E9}from"zod";var Ce8,pd0,td0,rd0;var q0$=O(()=>{Y1();q4();Ce8=E9.object({id:E9.string(),userId:E9.string(),status:E9.enum(["pending","approved","denied"]),createdAt:E9.string(),user:E9.object({id:E9.string(),name:E9.string(),email:E9.string(),image:E9.string().nullable()}).nullable()}),pd0=$0({name:"ORGANIZATION_JOIN_REQUEST_LIST",description:"List pending requests to join the organization.",annotations:{title:"List Join Requests",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({}),outputSchema:E9.object({requests:E9.array(Ce8)}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z);return{requests:(await Z.storage.organizationJoinRequests.listPendingWithUser(G.id)).map((Y)=>({id:Y.id,userId:Y.userId,status:Y.status,createdAt:new Date(Y.createdAt).toISOString(),user:Y.user}))}}}),td0=$0({name:"ORGANIZATION_JOIN_REQUEST_APPROVE",description:"Approve a pending join request, adding the user as a member.",annotations:{title:"Approve Join Request",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({requestId:E9.string()}),outputSchema:E9.object({success:E9.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationJoinRequests.getById($.requestId);if(!X||X.organizationId!==G.id)throw Error("Join request not found");if(X.status!=="pending")throw Error("Join request has already been decided");let Y=y1(Z);if(!await Z.storage.organizationJoinRequests.decide(X.id,"approved",Y??X.userId))return{success:!0};try{await Z.boundAuth.organization.addMember({organizationId:G.id,userId:X.userId,role:["user"]})}catch(J){if(!HN(J))throw J}if(Y)i1.capture({distinctId:Y,event:"organization_join_request_approved",groups:{organization:G.id},properties:{organization_id:G.id,user_id:X.userId}});return{success:!0}}}),rd0=$0({name:"ORGANIZATION_JOIN_REQUEST_DENY",description:"Deny a pending join request.",annotations:{title:"Deny Join Request",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({requestId:E9.string()}),outputSchema:E9.object({success:E9.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationJoinRequests.getById($.requestId);if(!X||X.organizationId!==G.id)throw Error("Join request not found");if(X.status!=="pending")throw Error("Join request has already been decided");let Y=y1(Z);if(await Z.storage.organizationJoinRequests.decide(X.id,"denied",Y??X.userId)&&Y)i1.capture({distinctId:Y,event:"organization_join_request_denied",groups:{organization:G.id},properties:{organization_id:G.id,user_id:X.userId}});return{success:!0}}})});import{z as PX}from"zod";var od0;var M0$=O(()=>{q4();Y1();p3();od0=$0({name:"ORGANIZATION_MEMBER_ADD",description:"Invite a member to the organization by email with an assigned role.",annotations:{title:"Add Organization Member",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:PX.object({organizationId:PX.string().optional(),userId:PX.string(),role:PX.array(PX.string())}),outputSchema:PX.object({id:PX.string(),organizationId:PX.string(),userId:PX.string(),role:PX.union([PX.string(),PX.array(PX.string())]),createdAt:PX.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(G!==Z.organization?.id)throw Error("Organization ID does not match authenticated organization");let X=Array.isArray($.role)?$.role[0]:$.role;if(X&&!T60(Z.auth.user?.role,X))throw Error(`Insufficient privileges to assign role "${X}"`);let Y=await Z.boundAuth.organization.addMember({organizationId:G,userId:$.userId,role:$.role});if(!Y)throw Error("Failed to add member");let Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"organization_member_added",groups:{organization:G},properties:{organization_id:G,added_user_id:$.userId,role:$.role}});return{...Y,role:Y.role,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt}}})});import{z as Uv}from"zod";var ad0;var k0$=O(()=>{q4();Y1();ad0=$0({name:"ORGANIZATION_MEMBER_REMOVE",description:"Remove a member from the organization. Revokes all their access immediately.",annotations:{title:"Remove Organization Member",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Uv.object({organizationId:Uv.string().optional(),memberIdOrEmail:Uv.string()}),outputSchema:Uv.object({success:Uv.boolean(),memberIdOrEmail:Uv.string()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");await Z.boundAuth.organization.removeMember({organizationId:G,memberIdOrEmail:$.memberIdOrEmail});let X=y1(Z);if(X)i1.capture({distinctId:X,event:"organization_member_removed",groups:{organization:G},properties:{organization_id:G,member_id_or_email:$.memberIdOrEmail}});return{success:!0,memberIdOrEmail:$.memberIdOrEmail}}})});import{z as t7}from"zod";var sd0;var S0$=O(()=>{Y1();sd0=$0({name:"ORGANIZATION_MEMBER_LIST",description:"List all members in the organization with their roles.",annotations:{title:"List Organization Members",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:t7.object({limit:t7.number().optional(),offset:t7.number().optional()}),outputSchema:t7.object({members:t7.array(t7.object({id:t7.string(),organizationId:t7.string(),userId:t7.string(),role:t7.string(),createdAt:t7.string().datetime().describe("ISO 8601 timestamp"),user:t7.object({id:t7.string(),name:t7.string(),email:t7.string(),image:t7.string().optional()}).optional()}))}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.boundAuth.organization.listMembers({organizationId:G,limit:$.limit,offset:$.offset});return{members:(Array.isArray(X)?X:[]).map((Q)=>({...Q,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});import{z as SZ}from"zod";var ed0;var V0$=O(()=>{q4();Y1();p3();ed0=$0({name:"ORGANIZATION_MEMBER_UPDATE_ROLE",description:"Change a member's role (e.g., admin, member) within the organization.",annotations:{title:"Update Member Role",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:SZ.object({organizationId:SZ.string().optional(),memberId:SZ.string(),role:SZ.array(SZ.string())}),outputSchema:SZ.object({id:SZ.string(),organizationId:SZ.string(),userId:SZ.string(),role:SZ.union([SZ.literal("admin"),SZ.literal("member"),SZ.literal("owner")]),createdAt:SZ.string().datetime().describe("ISO 8601 timestamp"),user:SZ.object({email:SZ.string(),name:SZ.string(),image:SZ.string().optional()})}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=Array.isArray($.role)?$.role[0]:$.role;if(X&&!T60(Z.auth.user?.role,X))throw Error(`Insufficient privileges to assign role "${X}"`);let Y=await Z.boundAuth.organization.updateMemberRole({organizationId:G,memberId:$.memberId,role:$.role});if(!Y)throw Error("Failed to update member role");Z.invalidateMemberRole?.(Y.userId,G);let Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"organization_member_role_updated",groups:{organization:G},properties:{organization_id:G,member_id:$.memberId,target_user_id:Y.userId,new_role:Array.isArray($.role)?$.role.join(","):$.role}});return{...Y,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt}}})});var C0$=O(()=>{W0$();K0$();w0$();U0$();F0$();N0$();B0$();D0$();L0$();z0$();P0$();R0$();q0$();M0$();k0$();S0$();V0$()});var RY="super-agent",_0$="task-board.item.updated",b0$="task-board.item.deleted";import{z as u6}from"zod";var ei,TE,be8,f0$,Fv;var IE=O(()=>{ei=u6.enum(["triage","todo","in_progress","in_review","done"]),TE=u6.enum(["none","low","medium","high","urgent"]),be8=u6.object({threadId:u6.string(),virtualMcpId:u6.string().nullable(),status:u6.enum(["in_progress","requires_action","failed","completed","expired"]).nullable(),title:u6.string().nullable(),lastMessage:u6.string().nullable(),hasPreview:u6.boolean(),createdAt:u6.string()}),f0$=u6.object({url:u6.string(),number:u6.number(),repoOwner:u6.string(),repoName:u6.string(),createdAt:u6.string(),title:u6.string().nullable(),body:u6.string().nullable(),state:u6.enum(["open","closed"]).nullable(),draft:u6.boolean().nullable(),merged:u6.boolean().nullable()}),Fv=u6.object({id:u6.string(),organizationId:u6.string(),title:u6.string(),description:u6.string().nullable(),status:ei,priority:TE,assigneeId:u6.string().nullable(),assignedBy:u6.string().nullable(),dueDate:u6.string().datetime().nullable(),threads:u6.array(be8),createdBy:u6.string(),createdAt:u6.string().datetime(),updatedBy:u6.string(),updatedAt:u6.string().datetime()})});async function b50($,Z,G){if(G===RY)return;let{members:X}=await $.boundAuth.organization.listMembers({organizationId:Z,filterField:"userId",filterValue:G});if(!X.some((Y)=>Y.userId===G))throw Error("assigneeId is not a member of the organization")}var $l0=O(()=>{IE()});async function vW($,Z){if(!(await $.storage.organizationSettings.get(Z))?.task_board_enabled)throw Error("Task board is not enabled for this organization")}async function Zl0($,Z,G){let X;try{return await Promise.race([$.aiProviders.listModels(Z,G),new Promise((Q,J)=>{X=setTimeout(()=>J(Error("listModels timeout")),fe8)})])}finally{if(X)clearTimeout(X)}}function xe8($,Z){switch($){case"fast":return Z.chat.fast;case"smart":return Z.chat.smart;case"thinking":return Z.chat.thinking;case"image":return Z.image;case"web_search":return Z.webSearch;case"deep_research":return Z.deepResearch}}function Gl0($,Z,G){let X=$.find((Y)=>Y.modelId===Z);return{title:X?.title??G??Z,providerId:X?.providerId,capabilities:X?.capabilities,limits:X?.limits??null}}async function FJ($,Z){let G=$.organization?.id;if(!G)throw Error("resolveTier called without an organization");let Y=(await $.storage.organizationSettings.get(G))?.simple_mode?.tiers?.[Z]??null,Q=await $.storage.aiProviderKeys.list({organizationId:G});if(Y&&Q.some((U)=>U.id===Y.keyId)){let U=await Zl0($,Y.keyId,G).catch(()=>[]);return{credentialId:Y.keyId,modelId:Y.modelId,modelMeta:Gl0(U,Y.modelId,Y.title)}}if(Q.length===0)throw new Hv(Z);let J={};await Promise.all(Q.map(async(U)=>{J[U.id]=await Zl0($,U.id,G).catch(()=>[])}));let W=Q.map((U)=>({id:U.id,providerId:U.providerId,label:U.label,presetId:U.presetId,createdBy:U.createdBy,createdAt:U.createdAt})),K=Cb0(W,J),w=xe8(Z,K);if(!w)throw new Hv(Z);return{credentialId:w.keyId,modelId:w.modelId,modelMeta:Gl0(J[w.keyId]??[],w.modelId,w.title)}}async function x0$($,Z,G){let X=$.organization?.id;if(!X)throw Error("resolveSpecificModel called without an organization");let Y=await Zl0($,Z,X).catch(()=>[]);return{credentialId:Z,modelId:G,modelMeta:Gl0(Y,G)}}async function _Q($,Z){try{return await FJ($,Z)}catch(G){if(G instanceof Hv)return null;return console.warn(`[resolveTier] tier "${Z}" resolution failed:`,G),null}}var Hv,fe8=5000;var Nv=O(()=>{R8();Hv=class Hv extends Error{tier;constructor($){super(`No model available for tier "${$}". Connect a provider or configure the tier in organization settings.`);this.tier=$;this.name="TierUnavailableError"}}});function f50($){return $.sandboxProviderKind==="agent-sandbox"&&$.harnessId==="decopilot"}function v0$($){return $.harnessId==="decopilot"&&($.sandboxProviderKind==null||$.sandboxProviderKind==="agent-sandbox")}function ye8($){return{type:"data-run-status",id:"run-status",data:{stage:$}}}function y0$($){if(!$||typeof $!=="object")return!1;return $.type==="data-run-status"}async function tw($,Z,G){if(!$)return;try{await $.publishRawChunk(Z,ye8(G))}catch{}}var ve8,$n,dw5;var Zn=O(()=>{ve8=["waiting-runner","starting-run","gathering-context","preparing-tools","starting-assistant","analyzing-scope"],$n=["gathering-context","preparing-tools","starting-assistant","analyzing-scope"],dw5=new Set(ve8)});function x50(){return crypto.randomUUID()}var Yl0=_((iw5,c0$)=>{var{defineProperty:Xl0,getOwnPropertyDescriptor:ge8,getOwnPropertyNames:he8}=Object,ce8=Object.prototype.hasOwnProperty,ue8=($,Z)=>{for(var G in Z)Xl0($,G,{get:Z[G],enumerable:!0})},de8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of he8(Z))if(!ce8.call($,Y)&&Y!==G)Xl0($,Y,{get:()=>Z[Y],enumerable:!(X=ge8(Z,Y))||X.enumerable})}return $},le8=($)=>de8(Xl0({},"__esModule",{value:!0}),$),g0$={};ue8(g0$,{SYMBOL_FOR_REQ_CONTEXT:()=>h0$,getContext:()=>me8});c0$.exports=le8(g0$);var h0$=Symbol.for("@vercel/request-context");function me8(){return globalThis[h0$]?.get?.()??{}}});var Gn=_((nw5,l0$)=>{var{defineProperty:Ql0,getOwnPropertyDescriptor:ie8,getOwnPropertyNames:ne8}=Object,pe8=Object.prototype.hasOwnProperty,te8=($,Z)=>{for(var G in Z)Ql0($,G,{get:Z[G],enumerable:!0})},re8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of ne8(Z))if(!pe8.call($,Y)&&Y!==G)Ql0($,Y,{get:()=>Z[Y],enumerable:!(X=ie8(Z,Y))||X.enumerable})}return $},oe8=($)=>re8(Ql0({},"__esModule",{value:!0}),$),u0$={};te8(u0$,{VercelOidcTokenError:()=>d0$});l0$.exports=oe8(u0$);class d0$ extends Error{constructor($,Z){super($);this.name="VercelOidcTokenError",this.cause=Z}toString(){if(this.cause)return`${this.name}: ${this.message}: ${this.cause}`;return`${this.name}: ${this.message}`}}});var p0$=_((pw5,n0$)=>{var{create:ae8,defineProperty:v50,getOwnPropertyDescriptor:se8,getOwnPropertyNames:ee8,getPrototypeOf:$06}=Object,Z06=Object.prototype.hasOwnProperty,G06=($,Z)=>{for(var G in Z)v50($,G,{get:Z[G],enumerable:!0})},m0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of ee8(Z))if(!Z06.call($,Y)&&Y!==G)v50($,Y,{get:()=>Z[Y],enumerable:!(X=se8(Z,Y))||X.enumerable})}return $},Wl0=($,Z,G)=>(G=$!=null?ae8($06($)):{},m0$(Z||!$||!$.__esModule?v50(G,"default",{value:$,enumerable:!0}):G,$)),X06=($)=>m0$(v50({},"__esModule",{value:!0}),$),i0$={};G06(i0$,{findRootDir:()=>J06,getUserDataDir:()=>W06});n0$.exports=X06(i0$);var Xn=Wl0(c0("path")),Y06=Wl0(c0("fs")),Jl0=Wl0(c0("os")),Q06=Gn();function J06(){try{let $=process.cwd();while($!==Xn.default.dirname($)){let Z=Xn.default.join($,".vercel");if(Y06.default.existsSync(Z))return $;$=Xn.default.dirname($)}}catch($){throw new Q06.VercelOidcTokenError("Token refresh only supported in node server environments")}return null}function W06(){if(process.env.XDG_DATA_HOME)return process.env.XDG_DATA_HOME;switch(Jl0.default.platform()){case"darwin":return Xn.default.join(Jl0.default.homedir(),"Library/Application Support");case"linux":return Xn.default.join(Jl0.default.homedir(),".local/share");case"win32":if(process.env.LOCALAPPDATA)return process.env.LOCALAPPDATA;return null;default:return null}}});var $1$=_((tw5,e0$)=>{var{create:K06,defineProperty:y50,getOwnPropertyDescriptor:w06,getOwnPropertyNames:U06,getPrototypeOf:F06}=Object,H06=Object.prototype.hasOwnProperty,N06=($,Z)=>{for(var G in Z)y50($,G,{get:Z[G],enumerable:!0})},t0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of U06(Z))if(!H06.call($,Y)&&Y!==G)y50($,Y,{get:()=>Z[Y],enumerable:!(X=w06(Z,Y))||X.enumerable})}return $},r0$=($,Z,G)=>(G=$!=null?K06(F06($)):{},t0$(Z||!$||!$.__esModule?y50(G,"default",{value:$,enumerable:!0}):G,$)),B06=($)=>t0$(y50({},"__esModule",{value:!0}),$),o0$={};N06(o0$,{isValidAccessToken:()=>L06,readAuthConfig:()=>D06,writeAuthConfig:()=>E06});e0$.exports=B06(o0$);var Yn=r0$(c0("fs")),a0$=r0$(c0("path")),O06=Qn();function s0$(){let $=(0,O06.getVercelDataDir)();if(!$)throw Error(`Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`);return a0$.join($,"auth.json")}function D06(){try{let $=s0$();if(!Yn.existsSync($))return null;let Z=Yn.readFileSync($,"utf8");if(!Z)return null;return JSON.parse(Z)}catch($){return null}}function E06($){let Z=s0$(),G=a0$.dirname(Z);if(!Yn.existsSync(G))Yn.mkdirSync(G,{mode:504,recursive:!0});Yn.writeFileSync(Z,JSON.stringify($,null,2),{mode:384})}function L06($,Z=0){if(!$.token)return!1;if(typeof $.expiresAt!=="number")return!0;let G=Math.floor(Date.now()/1000),X=Z/1000;return $.expiresAt>=G+X}});var Y1$=_((rw5,X1$)=>{var{defineProperty:Ul0,getOwnPropertyDescriptor:z06,getOwnPropertyNames:j06}=Object,P06=Object.prototype.hasOwnProperty,A06=($,Z)=>{for(var G in Z)Ul0($,G,{get:Z[G],enumerable:!0})},T06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of j06(Z))if(!P06.call($,Y)&&Y!==G)Ul0($,Y,{get:()=>Z[Y],enumerable:!(X=z06(Z,Y))||X.enumerable})}return $},I06=($)=>T06(Ul0({},"__esModule",{value:!0}),$),Z1$={};A06(Z1$,{processTokenResponse:()=>S06,refreshTokenRequest:()=>k06});X1$.exports=I06(Z1$);var Kl0=c0("os"),R06="https://vercel.com",q06="cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp",G1$=`@vercel/oidc node-${process.version} ${(0,Kl0.platform)()} (${(0,Kl0.arch)()}) ${(0,Kl0.hostname)()}`,wl0=null;async function M06(){if(wl0)return wl0;let $=`${R06}/.well-known/openid-configuration`,Z=await fetch($,{headers:{"user-agent":G1$}});if(!Z.ok)throw Error("Failed to discover OAuth endpoints");let G=await Z.json();if(!G||typeof G.token_endpoint!=="string")throw Error("Invalid OAuth discovery response");let X=G.token_endpoint;return wl0=X,X}async function k06($){let Z=await M06();return await fetch(Z,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded","user-agent":G1$},body:new URLSearchParams({client_id:q06,grant_type:"refresh_token",...$})})}async function S06($){let Z=await $.json();if(!$.ok){let G=typeof Z==="object"&&Z&&"error"in Z?String(Z.error):"Token refresh failed";return[Error(G)]}if(typeof Z!=="object"||Z===null)return[Error("Invalid token response")];if(typeof Z.access_token!=="string")return[Error("Missing access_token in response")];if(Z.token_type!=="Bearer")return[Error("Invalid token_type in response")];if(typeof Z.expires_in!=="number")return[Error("Missing expires_in in response")];return[null,Z]}});var Hl0=_((ow5,K1$)=>{var{defineProperty:Fl0,getOwnPropertyDescriptor:V06,getOwnPropertyNames:C06}=Object,_06=Object.prototype.hasOwnProperty,b06=($,Z)=>{for(var G in Z)Fl0($,G,{get:Z[G],enumerable:!0})},f06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of C06(Z))if(!_06.call($,Y)&&Y!==G)Fl0($,Y,{get:()=>Z[Y],enumerable:!(X=V06(Z,Y))||X.enumerable})}return $},x06=($)=>f06(Fl0({},"__esModule",{value:!0}),$),Q1$={};b06(Q1$,{AccessTokenMissingError:()=>J1$,RefreshAccessTokenFailedError:()=>W1$});K1$.exports=x06(Q1$);class J1$ extends Error{constructor(){super("No authentication found. Please log in with the Vercel CLI (vercel login).");this.name="AccessTokenMissingError"}}class W1$ extends Error{constructor($){super("Failed to refresh authentication token.",{cause:$});this.name="RefreshAccessTokenFailedError"}}});var Qn=_((aw5,N1$)=>{var{create:v06,defineProperty:g50,getOwnPropertyDescriptor:y06,getOwnPropertyNames:g06,getPrototypeOf:h06}=Object,c06=Object.prototype.hasOwnProperty,u06=($,Z)=>{for(var G in Z)g50($,G,{get:Z[G],enumerable:!0})},U1$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of g06(Z))if(!c06.call($,Y)&&Y!==G)g50($,Y,{get:()=>Z[Y],enumerable:!(X=y06(Z,Y))||X.enumerable})}return $},F1$=($,Z,G)=>(G=$!=null?v06(h06($)):{},U1$(Z||!$||!$.__esModule?g50(G,"default",{value:$,enumerable:!0}):G,$)),d06=($)=>U1$(g50({},"__esModule",{value:!0}),$),H1$={};u06(H1$,{assertVercelOidcTokenResponse:()=>Nl0,findProjectInfo:()=>n06,getTokenPayload:()=>r06,getVercelDataDir:()=>l06,getVercelOidcToken:()=>i06,getVercelToken:()=>m06,isExpired:()=>o06,loadToken:()=>t06,saveToken:()=>p06});N1$.exports=d06(H1$);var Jn=F1$(c0("path")),RE=F1$(c0("fs")),Dv=Gn(),h50=p0$(),Bv=$1$(),w1$=Y1$(),Ov=Hl0();function l06(){let Z=(0,h50.getUserDataDir)();if(!Z)return null;return Jn.join(Z,"com.vercel.cli")}async function m06($){let Z=(0,Bv.readAuthConfig)();if(!Z?.token)throw new Ov.AccessTokenMissingError;if((0,Bv.isValidAccessToken)(Z,$?.expirationBufferMs))return Z.token;if(!Z.refreshToken)throw(0,Bv.writeAuthConfig)({}),new Ov.RefreshAccessTokenFailedError("No refresh token available");try{let G=await(0,w1$.refreshTokenRequest)({refresh_token:Z.refreshToken}),[X,Y]=await(0,w1$.processTokenResponse)(G);if(X||!Y)throw(0,Bv.writeAuthConfig)({}),new Ov.RefreshAccessTokenFailedError(X);let Q={token:Y.access_token,expiresAt:Math.floor(Date.now()/1000)+Y.expires_in};if(Y.refresh_token)Q.refreshToken=Y.refresh_token;return(0,Bv.writeAuthConfig)(Q),Q.token}catch(G){if((0,Bv.writeAuthConfig)({}),G instanceof Ov.AccessTokenMissingError||G instanceof Ov.RefreshAccessTokenFailedError)throw G;throw new Ov.RefreshAccessTokenFailedError(G)}}async function i06($,Z,G){let X=`https://api.vercel.com/v1/projects/${Z}/token?source=vercel-oidc-refresh${G?`&teamId=${G}`:""}`,Y=await fetch(X,{method:"POST",headers:{Authorization:`Bearer ${$}`}});if(!Y.ok)throw new Dv.VercelOidcTokenError(`Failed to refresh OIDC token: ${Y.statusText}`);let Q=await Y.json();return Nl0(Q),Q}function Nl0($){if(!$||typeof $!=="object")throw TypeError("Vercel OIDC token is malformed. Expected an object. Please run `vc env pull` and try again");if(!("token"in $)||typeof $.token!=="string")throw TypeError("Vercel OIDC token is malformed. Expected a string-valued token property. Please run `vc env pull` and try again")}function n06(){let $=(0,h50.findRootDir)();if(!$)throw new Dv.VercelOidcTokenError("Unable to find project root directory. Have you linked your project with `vc link?`");let Z=Jn.join($,".vercel","project.json");if(!RE.existsSync(Z))throw new Dv.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");let G=JSON.parse(RE.readFileSync(Z,"utf8"));if(typeof G.projectId!=="string"&&typeof G.orgId!=="string")throw TypeError("Expected a string-valued projectId property. Try running `vc link` to re-link your project.");return{projectId:G.projectId,teamId:G.orgId}}function p06($,Z){let G=(0,h50.getUserDataDir)();if(!G)throw new Dv.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");let X=Jn.join(G,"com.vercel.token",`${Z}.json`),Y=JSON.stringify($);RE.mkdirSync(Jn.dirname(X),{mode:504,recursive:!0}),RE.writeFileSync(X,Y),RE.chmodSync(X,432);return}function t06($){let Z=(0,h50.getUserDataDir)();if(!Z)throw new Dv.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");let G=Jn.join(Z,"com.vercel.token",`${$}.json`);if(!RE.existsSync(G))return null;let X=JSON.parse(RE.readFileSync(G,"utf8"));return Nl0(X),X}function r06($){let Z=$.split(".");if(Z.length!==3)throw new Dv.VercelOidcTokenError("Invalid token. Please run `vc env pull` and try again");let G=Z[1].replace(/-/g,"+").replace(/_/g,"/"),X=G.padEnd(G.length+(4-G.length%4)%4,"=");return JSON.parse(Buffer.from(X,"base64").toString("utf8"))}function o06($,Z=0){return $.exp*1000<Date.now()+Z}});var E1$=_((sw5,D1$)=>{var{defineProperty:Bl0,getOwnPropertyDescriptor:a06,getOwnPropertyNames:s06}=Object,e06=Object.prototype.hasOwnProperty,$16=($,Z)=>{for(var G in Z)Bl0($,G,{get:Z[G],enumerable:!0})},Z16=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of s06(Z))if(!e06.call($,Y)&&Y!==G)Bl0($,Y,{get:()=>Z[Y],enumerable:!(X=a06(Z,Y))||X.enumerable})}return $},G16=($)=>Z16(Bl0({},"__esModule",{value:!0}),$),O1$={};$16(O1$,{refreshToken:()=>X16});D1$.exports=G16(O1$);var B1$=Gn(),NN=Qn();async function X16($){let Z=$?.project,G=$?.team;if(!Z&&!G){let Y=(0,NN.findProjectInfo)();Z=Y.projectId,G=Y.teamId}else if(!Z||!G){let Y=(0,NN.findProjectInfo)();Z=Z??Y.projectId,G=G??Y.teamId}if(!Z)throw new B1$.VercelOidcTokenError("Failed to refresh OIDC token: No project specified. Try re-linking your project with `vc link`");let X=(0,NN.loadToken)(Z);if(!X||(0,NN.isExpired)((0,NN.getTokenPayload)(X.token),$?.expirationBufferMs)){let Y=await(0,NN.getVercelToken)({expirationBufferMs:$?.expirationBufferMs});if(X=await(0,NN.getVercelOidcToken)(Y,Z,G),!X)throw new B1$.VercelOidcTokenError("Failed to refresh OIDC token");(0,NN.saveToken)(X,Z)}process.env.VERCEL_OIDC_TOKEN=X.token;return}});var j1$=_((ew5,z1$)=>{var{defineProperty:Dl0,getOwnPropertyDescriptor:Y16,getOwnPropertyNames:Q16}=Object,J16=Object.prototype.hasOwnProperty,W16=($,Z)=>{for(var G in Z)Dl0($,G,{get:Z[G],enumerable:!0})},K16=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of Q16(Z))if(!J16.call($,Y)&&Y!==G)Dl0($,Y,{get:()=>Z[Y],enumerable:!(X=Y16(Z,Y))||X.enumerable})}return $},w16=($)=>K16(Dl0({},"__esModule",{value:!0}),$),L1$={};W16(L1$,{getVercelOidcToken:()=>H16,getVercelOidcTokenSync:()=>Ol0});z1$.exports=w16(L1$);var U16=Yl0(),F16=Gn();async function H16($){let Z="",G;try{Z=Ol0()}catch(X){G=X}try{let[{getTokenPayload:X,isExpired:Y},{refreshToken:Q}]=await Promise.all([await Promise.resolve().then(() => k(Qn())),await Promise.resolve().then(() => k(E1$()))]);if(!Z||Y(X(Z),$?.expirationBufferMs))await Q($),Z=Ol0()}catch(X){let Y=G instanceof Error?G.message:"";if(X instanceof Error)Y=`${Y}
+  `.execute($)).rows[0]?.exists)await c6`CREATE ROLE ${c6.id(G)} NOLOGIN`.execute($);await c6`GRANT ${c6.id(G)} TO CURRENT_USER`.execute($),await c6`GRANT USAGE, CREATE ON SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`GRANT ALL ON ALL TABLES IN SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`GRANT ALL ON ALL SEQUENCES IN SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`ALTER DEFAULT PRIVILEGES IN SCHEMA ${c6.id(Z)} GRANT ALL ON TABLES TO ${c6.id(G)}`.execute($),await c6`ALTER DEFAULT PRIVILEGES IN SCHEMA ${c6.id(Z)} GRANT ALL ON SEQUENCES TO ${c6.id(G)}`.execute($),await c6`REVOKE ALL ON SCHEMA public FROM ${c6.id(G)}`.execute($)}async function ss8($,Z,G,X){try{return await $.transaction().execute(async(Y)=>{return await c6`SET LOCAL ROLE ${c6.id(G)}`.execute(Y),await c6`SET LOCAL search_path TO ${c6.id(Z)}`.execute(Y),await c6.raw(X).execute(Y)})}catch(Y){if(os8(Y))return await as8($,Z,G),await $.transaction().execute(async(Q)=>{return await c6`SET LOCAL ROLE ${c6.id(G)}`.execute(Q),await c6`SET LOCAL search_path TO ${c6.id(Z)}`.execute(Q),await c6.raw(X).execute(Q)});throw Y}}var is8,ps8,ue1;var de1=O(()=>{Y1();is8=fW.object({results:fW.array(fW.unknown()).optional(),success:fW.boolean().optional()});ps8=fW.object({sql:fW.string().describe("The SQL query to run"),params:fW.array(fW.any()).describe("The parameters to pass to the SQL query").optional()});ue1=$0({name:"DATABASES_RUN_SQL",description:"Run a SQL query in a connection-scoped isolated schema. Supports SELECT, DDL, and DML.",annotations:{title:"Run SQL Query",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:ps8,outputSchema:fW.object({result:fW.array(is8)}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=ns8($.sql,$.params||[]);if(!Z.connectionId)throw Error("Connection context required for database access");console.warn("DATABASES_RUN_SQL invoked",{"tool.deprecation_probe":"DATABASES_RUN_SQL","connection.id":Z.connectionId,"organization.id":Z.organization?.id??null,"user.id":Z.auth.user?.id??null});let X=ts8(Z.connectionId),Y=rs8(Z.connectionId);return{result:[{results:(await ss8(Z.db,X,Y,G)).rows,success:!0}]}}})});function q50($){let Z=$.access.getRole();if(!Z||!DQ.includes(Z))throw new Vw("Only organization owners and admins can change org-wide pin status")}var Qd0=O(()=>{p3();gD()});import{z as ie1}from"zod";function $e8(){let $=le1[Math.floor(Math.random()*le1.length)];return`icon://${me1[Math.floor(Math.random()*me1.length)]}?color=${$}`}var le1,me1,Ze8,Ge8,Jd0;var ne1=O(()=>{Y1();QH();Qd0();vi();le1=["red","orange","amber","yellow","lime","green","emerald","cyan","sky","blue","indigo","violet","purple","fuchsia","pink","rose"],me1=["Star01","Zap","Heart","Globe01","Compass03","Lightbulb02","Rocket01","Flag01","BookOpen01","Shield01","Key01","Diamond01","Cube01","Target04","Award01","Briefcase01","Coffee","Feather","Hexagon01","Layers3_01","Map01","Palette","Package","Terminal"];Ze8=ie1.object({data:_u.describe("Data for the new virtual MCP")}),Ge8=ie1.object({item:sZ.describe("The created virtual MCP entity")}),Jd0=$0({name:"COLLECTION_VIRTUAL_MCP_CREATE",description:"Create a Virtual MCP (agent) that aggregates tools from multiple connections into one endpoint. Pass `prompts` to seed the agent with kickstart prompts (conversation starters shown as icebreakers). Author them from the agent's role/instructions and the descriptions of the tools it will have, so the starters are coherent and immediately useful.",annotations:{title:"Create Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Ze8,outputSchema:Ge8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to create virtual MCP");if($.data.pinned===!0)q50(Z);let{prompts:Y,...Q}=$.data,J={...Q,icon:Q.icon??$e8()},W=await Z.storage.virtualMcps.create(G.id,X,J);if(Y?.length&&Z.orgFs&&W.id)await Z50(Z.orgFs,W.id,X,Y);return{item:W}}})});function Xe8($){let Z=[],G=0;while(G<$.length){let X=$[G];if(X==="%")Z.push(".*");else if(X==="_")Z.push(".");else if(/[.*+?^${}()|[\]\\]/.test(X))Z.push("\\"+X);else Z.push(X);G++}return Z.join("")}function wN($){return typeof $==="string"||typeof $==="number"}function Wd0($,Z){let G=Z.split("."),X=$;for(let Y of G){if(X==null||typeof X!=="object")return;X=X[Y]}return X}function Ye8($,Z){return $.connections.some((G)=>G.connection_id===Z)}function M50($,Z){if("conditions"in Z){let{operator:W,conditions:K}=Z;switch(W){case"and":return K.every((w)=>M50($,w));case"or":return K.some((w)=>M50($,w));case"not":return!K.every((w)=>M50($,w));default:return!0}}let{field:G,operator:X,value:Y}=Z,Q=G.join(".");if(Q==="connection_id"){if(X!=="eq"||typeof Y!=="string")return!1;return Ye8($,Y)}let J=Wd0($,Q);switch(X){case"eq":return J===Y;case"gt":return wN(J)&&wN(Y)&&J>Y;case"gte":return wN(J)&&wN(Y)&&J>=Y;case"lt":return wN(J)&&wN(Y)&&J<Y;case"lte":return wN(J)&&wN(Y)&&J<=Y;case"in":return Array.isArray(Y)&&Y.includes(J);case"like":if(typeof J!=="string"||typeof Y!=="string")return!1;if(Y.length>100)return!1;let W=Xe8(Y);return new RegExp(`^${W}$`,"i").test(J);case"contains":if(typeof J!=="string"||typeof Y!=="string")return!1;return J.toLowerCase().includes(Y.toLowerCase());default:return!0}}function Qe8($,Z){return[...$].sort((G,X)=>{for(let Y of Z){let Q=Y.field.join("."),J=Wd0(G,Q),W=Wd0(X,Q),K=0;if(J==null&&W==null)continue;if(J==null)K=Y.nulls==="first"?-1:1;else if(W==null)K=Y.nulls==="first"?1:-1;else if(typeof J==="string"&&typeof W==="string")K=J.localeCompare(W);else if(typeof J==="number"&&typeof W==="number")K=J-W;else K=String(J).localeCompare(String(W));if(K!==0)return Y.direction==="desc"?-K:K}return 0})}var Je8,We8,Kd0;var pe1=O(()=>{TY();Y1();QH();Je8=JJ,We8=mw(sZ),Kd0=$0({name:"COLLECTION_VIRTUAL_MCP_LIST",description:"List all MCP virtual MCPs in the organization",annotations:{title:"List Virtual MCPs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Je8,outputSchema:We8,handler:async($,Z)=>{await Z.access.check();let G=O0(Z),X=$.where&&!("conditions"in $.where)&&$.where.field.join(".")==="connection_id"&&$.where.operator==="eq"&&typeof $.where.value==="string"?$.where.value:void 0,Y=$.where&&!("conditions"in $.where)&&$.where.field.join(".")==="pinned"&&$.where.operator==="eq"&&typeof $.where.value==="boolean"?$.where.value:void 0,J=X?await Z.storage.virtualMcps.listByConnectionId(G.id,X):await Z.storage.virtualMcps.list(G.id,Y!==void 0?{pinnedOnly:Y}:void 0);if($.where)J=J.filter((H)=>M50(H,$.where));if($.orderBy&&$.orderBy.length>0)J=Qe8(J,$.orderBy);let W=J.length,K=$.offset??0,w=$.limit??100,U=J.slice(K,K+w),F=K+w<W;return{items:U,totalCount:W,hasMore:F}}})});import{z as wd0}from"zod";var Ke8,we8,Ud0;var te1=O(()=>{Y1();QH();Ke8=wd0.object({id:wd0.string().describe("ID of the virtual MCP to retrieve")}),we8=wd0.object({item:sZ.nullable().describe("The retrieved virtual MCP, or null if not found")}),Ud0=$0({name:"COLLECTION_VIRTUAL_MCP_GET",description:"Get a Virtual MCP's configuration, connections, and virtual tools by ID.",annotations:{title:"Get Virtual MCP",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Ke8,outputSchema:we8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.virtualMcps.findById($.id);if(X&&X.organization_id!==G.id)return{item:null};if(!X)return{item:null};return{item:X}}})});import{z as Fd0}from"zod";var Ue8,Fe8,Hd0;var re1=O(()=>{Y1();vi();QH();Qd0();Ue8=Fd0.object({id:Fd0.string().describe("ID of the virtual MCP to update"),data:bu.describe("Partial virtual MCP data to update")}),Fe8=Fd0.object({item:sZ.describe("The updated virtual MCP entity")}),Hd0=$0({name:"COLLECTION_VIRTUAL_MCP_UPDATE",description:"Update a Virtual MCP's name, slug, connection list, or kickstart prompts. Pass `prompts` to replace the agent's conversation starters (full set; empty array clears them).",annotations:{title:"Update Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Ue8,outputSchema:Fe8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to update virtual MCP");let Y=await Z.storage.virtualMcps.findById($.id);if(!Y)throw Error(`Virtual MCP not found: ${$.id}`);if(Y.organization_id!==G.id)throw Error(`Virtual MCP not found: ${$.id}`);let{prompts:Q,...J}=$.data;if(J.metadata&&Y.metadata)J.metadata={...Y.metadata,...J.metadata};if(J.pinned!==void 0&&J.pinned!==Y.pinned)q50(Z);let W=await Z.storage.virtualMcps.update($.id,X,J);if(Q!==void 0&&Z.orgFs)await Z50(Z.orgFs,$.id,X,Q);return{item:W}}})});import{z as Nd0}from"zod";var He8,Ne8,Bd0;var oe1=O(()=>{JN();QJ();Y1();vi();QH();He8=Nd0.object({id:Nd0.string().describe("ID of the virtual MCP to delete")}),Ne8=Nd0.object({item:sZ.describe("The deleted virtual MCP entity")}),Bd0=$0({name:"COLLECTION_VIRTUAL_MCP_DELETE",description:"Permanently delete a Virtual MCP and its virtual tools.",annotations:{title:"Delete Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:He8,outputSchema:Ne8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.virtualMcps.findById($.id);if(!X)throw Error(`Virtual MCP not found: ${$.id}`);if(X.organization_id!==G.id)throw Error(`Virtual MCP not found: ${$.id}`);if(await Z.storage.virtualMcps.delete($.id),Z.orgFs)await cu0(Z.orgFs,$.id,y1(Z)??"system");let Y=X.metadata?.githubRepo?.connectionId;if(Y)try{let Q=await Z.storage.connections.findById(Y,G.id);if(Q&&MQ(Q)){let W=await new b5(Z.db,Z.vault).get(Y);if(W?.accessToken)try{await fetch("https://api.github.com/installation/token",{method:"DELETE",headers:{Authorization:`Bearer ${W.accessToken}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28"},signal:AbortSignal.timeout(5000)})}catch{}await Z.storage.connections.delete(Y)}}catch(Q){console.error("[VIRTUAL_MCP_DELETE] failed to tear down repo-scoped connection",{childConnectionId:Y,error:Q.message})}return{item:X}}})});import{z as jX}from"zod";var Be8,Od0;var ae1=O(()=>{Y1();Be8=jX.object({id:jX.string(),virtualMcpId:jX.string(),pluginId:jX.string(),connectionId:jX.string().nullable(),settings:jX.record(jX.string(),jX.unknown()).nullable(),createdAt:jX.string(),updatedAt:jX.string()}),Od0=$0({name:"VIRTUAL_MCP_PLUGIN_CONFIG_GET",description:"Get a plugin's current configuration for a specific virtual MCP.",annotations:{title:"Get Virtual MCP Plugin Config",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:jX.object({virtualMcpId:jX.string().describe("Virtual MCP ID"),pluginId:jX.string().describe("Plugin ID")}),outputSchema:jX.object({config:Be8.nullable()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let{virtualMcpId:G,pluginId:X}=$,Y=await Z.storage.virtualMcpPluginConfigs.get(G,X);if(!Y)return{config:null};return{config:{id:Y.id,virtualMcpId:Y.virtualMcpId,pluginId:Y.pluginId,connectionId:Y.connectionId,settings:Y.settings,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt,updatedAt:Y.updatedAt instanceof Date?Y.updatedAt.toISOString():Y.updatedAt}}}})});import{z as kZ}from"zod";var Oe8,Dd0;var se1=O(()=>{Y1();fb();OG();Oe8=kZ.object({id:kZ.string(),virtualMcpId:kZ.string(),pluginId:kZ.string(),connectionId:kZ.string().nullable(),settings:kZ.record(kZ.string(),kZ.unknown()).nullable(),createdAt:kZ.string(),updatedAt:kZ.string()}),Dd0=$0({name:"VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE",description:"Set or update a plugin's configuration for a specific virtual MCP.",annotations:{title:"Update Virtual MCP Plugin Config",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:kZ.object({virtualMcpId:kZ.string().describe("Virtual MCP ID"),pluginId:kZ.string().describe("Plugin ID"),connectionId:kZ.string().nullable().optional().describe("MCP connection to bind"),settings:kZ.record(kZ.string(),kZ.unknown()).nullable().optional().describe("Plugin-specific settings")}),outputSchema:kZ.object({config:Oe8}),handler:async($,Z)=>{M0(Z),await Z.access.check();let{virtualMcpId:G,pluginId:X,connectionId:Y,settings:Q}=$,J=y1(Z),W=await Z.storage.connections.findById(G);if(!W)throw Error(`Connection not found: ${G}`);let K=Y?await Z.storage.connections.findById(Y):null;if(Y&&W.organization_id&&!K&&f3()){if(d10(Y,W.organization_id)){if(!J)throw Error("User ID required to create dev-assets connection");let U=bb(W.organization_id,jZ());await Z.storage.connections.create({...U,organization_id:W.organization_id,created_by:J})}}let w=await Z.storage.virtualMcpPluginConfigs.upsert(G,X,{connectionId:Y,settings:Q});return{config:{id:w.id,virtualMcpId:w.virtualMcpId,pluginId:w.pluginId,connectionId:w.connectionId,settings:w.settings,createdAt:w.createdAt instanceof Date?w.createdAt.toISOString():w.createdAt,updatedAt:w.updatedAt instanceof Date?w.updatedAt.toISOString():w.updatedAt}}}})});import{z as CG}from"zod";var De8,Ed0;var ee1=O(()=>{Y1();QH();De8=CG.object({connectionId:CG.string(),toolName:CG.string(),label:CG.string(),icon:CG.string().nullable().optional()}),Ed0=$0({name:"VIRTUAL_MCP_PINNED_VIEWS_UPDATE",description:"Update the pinned sidebar views for a virtual MCP. Replaces all current pins.",annotations:{title:"Update Pinned Views",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:CG.object({virtualMcpId:CG.string().describe("Virtual MCP ID"),pinnedViews:CG.array(De8).describe("Pinned views to set for the virtual MCP sidebar"),layout:CG.object({defaultMainView:CG.object({type:CG.string(),id:CG.string().optional(),toolName:CG.string().optional()}).nullable().optional(),chatDefaultOpen:CG.boolean().nullable().optional()}).optional()}),outputSchema:CG.object({item:sZ.nullable()}),handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let{virtualMcpId:X,pinnedViews:Y,layout:Q}=$,J=y1(Z),W=await Z.storage.virtualMcps.findById(X);if(!W)throw Error(`Virtual MCP not found: ${X}`);if(W.organization_id!==G.id)throw Error(`Virtual MCP not found: ${X}`);let K=W.metadata?.ui??{},w={...K,pinnedViews:Y.length>0?Y:null,layout:Q??K.layout??null};return{item:await Z.storage.virtualMcps.update(X,J??"system",{metadata:{...W.metadata,ui:w}})}}})});import{z as nw}from"zod";var Ee8,Le8,Ld0;var $0$=O(()=>{Y1();Ee8=nw.object({ids:nw.array(nw.string()).describe("Virtual MCP ids to look up")}),Le8=nw.object({items:nw.array(nw.object({id:nw.string(),last_used_at:nw.string().optional(),last_used_by:nw.string().optional()}))}),Ld0=$0({name:"VIRTUAL_MCP_LAST_USED_LIST",description:"Get last-used info (timestamp + user) for one or more virtual MCPs, derived from the most recent thread per agent.",annotations:{title:"List Virtual MCP Last Used",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Ee8,outputSchema:Le8,handler:async($,Z)=>{M0(Z),O0(Z),await Z.access.check();let G=await Z.storage.threads.findLastUsedByVirtualMcpIds($.ids);return{items:$.ids.map((X)=>({id:X,last_used_at:G.get(X)?.last_used_at,last_used_by:G.get(X)?.last_used_by}))}}})});var Z0$=O(()=>{ne1();pe1();te1();re1();oe1();ae1();se1();ee1();$0$()});import{z as w5}from"zod";var zd0;var G0$=O(()=>{B5();Y1();zd0=$0({name:"MONITORING_LOG_GET",description:"Get a single monitoring log by ID with full input and output data.",annotations:{title:"Get Monitoring Log",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:w5.object({id:w5.string().describe("Log ID to fetch")}),outputSchema:w5.object({log:w5.object({id:w5.string().optional(),organizationId:w5.string(),connectionId:w5.string(),toolName:w5.string(),input:w5.record(w5.string(),w5.unknown()),output:w5.record(w5.string(),w5.unknown()),isError:w5.boolean(),errorMessage:w5.string().nullish(),durationMs:w5.number(),timestamp:w5.string(),userId:w5.string().nullish(),requestId:w5.string(),userAgent:w5.string().nullish(),virtualMcpId:w5.string().nullish(),properties:w5.record(w5.string(),w5.string()).nullish()}).nullable().describe("The monitoring log, or null if not found")}),handler:async($,Z)=>{await Z.access.check(),await mY();let G=O0(Z),X=await Z.storage.monitoring.getById(G.id,$.id);if(!X)return{log:null};return{log:{...X,timestamp:X.timestamp instanceof Date?X.timestamp.toISOString():X.timestamp}}}})});import{z as B8}from"zod";var je8,jd0;var X0$=O(()=>{B5();Y1();je8=B8.object({id:B8.string().optional().describe("Unique log identifier"),organizationId:B8.string().describe("Organization ID"),connectionId:B8.string().describe("Connection ID"),toolName:B8.string().describe("Name of the tool that was called"),isError:B8.boolean().describe("Whether the call resulted in an error"),errorMessage:B8.string().nullish().describe("Error message if applicable"),durationMs:B8.number().describe("Call duration in milliseconds"),timestamp:B8.string().describe("ISO 8601 timestamp of the call"),userId:B8.string().nullish().describe("User who triggered the call"),requestId:B8.string().describe("Unique request identifier"),userAgent:B8.string().nullish().describe("Client identifier (x-mesh-client header)"),virtualMcpId:B8.string().nullish().describe("Virtual MCP (Agent) ID if routed through an agent"),properties:B8.record(B8.string(),B8.string()).nullish().describe("Custom key-value metadata attached to the log")}),jd0=$0({name:"MONITORING_LOGS_LIST",description:"List monitoring logs for tool calls with filtering and pagination.",annotations:{title:"List Monitoring Logs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:B8.object({connectionId:B8.string().optional().describe("Filter by connection ID"),excludeConnectionIds:B8.array(B8.string()).optional().describe("Exclude logs from these connection IDs (e.g. system connections)"),virtualMcpId:B8.string().optional().describe("Filter by Virtual MCP (Agent) ID"),toolName:B8.string().optional().describe("Filter by tool name"),isError:B8.boolean().optional().describe("Filter by error status"),startDate:B8.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:B8.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)"),limit:B8.number().default(20).describe("Maximum number of results"),offset:B8.number().default(0).describe("Offset for pagination"),properties:B8.record(B8.string(),B8.string()).optional().describe("Filter by exact property key=value matches"),propertyKeys:B8.array(B8.string()).optional().describe("Filter by logs that have these property keys"),propertyPatterns:B8.record(B8.string(),B8.string()).optional().describe("Filter by property value patterns (SQL LIKE, use % as wildcard)"),propertyInValues:B8.record(B8.string(),B8.string()).optional().describe("Filter by exact match within comma-separated values (e.g., user_tags in 'Engineering')")}),outputSchema:B8.object({logs:B8.array(je8).describe("Array of monitoring logs"),total:B8.number().describe("Total number of logs matching filters"),offset:B8.number().describe("Current offset for pagination"),limit:B8.number().describe("Current limit for pagination")}),handler:async($,Z)=>{await mY();let G=O0(Z),Y=$.properties||$.propertyKeys||$.propertyPatterns||$.propertyInValues?{properties:$.properties,propertyKeys:$.propertyKeys,propertyPatterns:$.propertyPatterns,propertyInValues:$.propertyInValues}:void 0,Q={organizationId:G.id,connectionId:$.connectionId,excludeConnectionIds:$.excludeConnectionIds,virtualMcpId:$.virtualMcpId,toolName:$.toolName,isError:$.isError,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,limit:$.limit,offset:$.offset,propertyFilters:Y},J=await Z.storage.monitoring.query(Q);return{logs:J.logs.map(({input:W,output:K,...w})=>({...w,timestamp:w.timestamp instanceof Date?w.timestamp.toISOString():w.timestamp})),total:J.total,offset:$.offset,limit:$.limit}}})});import{z as U$}from"zod";var Pd0;var Y0$=O(()=>{B5();Y1();Pd0=$0({name:"MONITORING_STATS",description:"Get aggregated statistics (counts, latency, error rates) for tool call monitoring.",annotations:{title:"Get Monitoring Stats",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:U$.object({startDate:U$.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:U$.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)"),interval:U$.string().regex(/^\d+[mhd]$/).optional().describe("Bucket interval for timeseries data (e.g. 1m, 5m, 2h, 1d). When provided, returns timeseries array."),connectionIds:U$.array(U$.string()).max(100).optional().describe("Filter by specific connection IDs (max 100)"),excludeConnectionIds:U$.array(U$.string()).max(100).optional().describe("Exclude specific connection IDs (max 100)"),toolNames:U$.array(U$.string()).max(100).optional().describe("Filter by specific tool names (max 100)"),status:U$.enum(["success","error"]).optional().describe("Filter metrics by execution status"),topN:U$.number().int().min(1).max(20).optional().describe("When provided with interval, also return top tools and their timeseries"),userIds:U$.array(U$.string()).max(100).optional().describe("Filter LLM usage by user IDs (only applied when llmUsage is true)"),llmUsage:U$.boolean().optional().describe("Aggregate LLM-call usage (tokens + USD cost) from raw log rows for the given connection. Returns token/cost totals and timeseries. Requires interval.")}),outputSchema:U$.object({totalCalls:U$.number().describe("Total number of tool calls"),errorRate:U$.number().optional().describe("Error rate as a decimal (0 to 1)"),avgDurationMs:U$.number().describe("Average call duration in milliseconds"),errorRatePercent:U$.string().optional().describe("Error rate as a percentage string"),totalErrors:U$.number().optional().describe("Total number of errors"),p50DurationMs:U$.number().optional().describe("50th percentile duration in milliseconds"),p95DurationMs:U$.number().optional().describe("95th percentile duration in milliseconds"),connectionBreakdown:U$.array(U$.object({connectionId:U$.string(),calls:U$.number(),errors:U$.number(),errorRate:U$.number(),avgDurationMs:U$.number()})).optional().describe("Per-connection metric breakdown"),totalInputTokens:U$.number().optional().describe("Total input tokens (LLM usage mode)"),totalOutputTokens:U$.number().optional().describe("Total output tokens (LLM usage mode)"),totalTokens:U$.number().optional().describe("Total tokens (LLM usage mode)"),totalCostUsd:U$.number().optional().describe("Total USD cost (LLM usage mode; only non-zero for providers that report cost)"),topTools:U$.array(U$.object({toolName:U$.string(),connectionId:U$.string().nullable(),calls:U$.number(),inputTokens:U$.number().optional(),outputTokens:U$.number().optional(),costUsd:U$.number().optional()})).optional().describe("Top tools ranked by calls"),topToolsTimeseries:U$.array(U$.object({timestamp:U$.string(),toolName:U$.string(),calls:U$.number(),errors:U$.number(),avg:U$.number(),p95:U$.number()})).optional().describe("Per-tool metric timeseries for the top tools"),timeseries:U$.array(U$.object({timestamp:U$.string(),calls:U$.number(),errors:U$.number(),errorRate:U$.number(),avg:U$.number(),p50:U$.number(),p95:U$.number(),inputTokens:U$.number().optional(),outputTokens:U$.number().optional(),totalTokens:U$.number().optional(),costUsd:U$.number().optional()})).optional().describe("Timeseries data points bucketed by interval")}),handler:async($,Z)=>{let G=O0(Z);if(await Z.access.check(),await mY(),$.interval&&$.llmUsage)return Z.storage.monitoring.queryLlmUsageStats({organizationId:G.id,interval:$.interval,connectionId:$.connectionIds?.[0]??"decopilot",startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,userIds:$.userIds,topN:$.topN});if($.interval){let Y=await Z.storage.monitoring.queryMetricTimeseries({organizationId:G.id,interval:$.interval,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,filters:{connectionIds:$.connectionIds,excludeConnectionIds:$.excludeConnectionIds,toolNames:$.toolNames,status:$.status}});if(!$.topN)return Y;let Q=await Z.storage.monitoring.queryMetricTopToolsTimeseries({organizationId:G.id,interval:$.interval,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,topN:$.topN,filters:{connectionIds:$.connectionIds,excludeConnectionIds:$.excludeConnectionIds,toolNames:$.toolNames,status:$.status}});return{...Y,topTools:Q.topTools,topToolsTimeseries:Q.timeseries}}let X=await Z.storage.monitoring.getStats({organizationId:G.id,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0});return{...X,errorRatePercent:(X.errorRate*100).toFixed(2)}}})});import{z as _G}from"zod";var Ad0;var Q0$=O(()=>{B5();Y1();Ad0=$0({name:"MONITORING_THREAD_USAGE",description:"Aggregate LLM token usage and USD cost per thread for the given thread IDs.",annotations:{title:"Get Thread Usage",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:_G.object({threadIds:_G.array(_G.string()).min(1).max(500).describe("Thread IDs to aggregate usage for (max 500)"),connectionId:_G.string().optional().describe("LLM connection ID (defaults to 'decopilot')"),startDate:_G.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:_G.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)")}),outputSchema:_G.object({items:_G.array(_G.object({threadId:_G.string(),calls:_G.number(),inputTokens:_G.number(),outputTokens:_G.number(),totalTokens:_G.number(),costUsd:_G.number()}))}),handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),await mY(),{items:await Z.storage.monitoring.queryThreadUsage({organizationId:G.id,connectionId:$.connectionId??"decopilot",threadIds:$.threadIds,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0})}}})});var J0$=O(()=>{G0$();X0$();Y0$();Q0$()});function k50($){return typeof $==="string"&&Ae8.has($.trim().toLowerCase())}var Ae8;var Td0=O(()=>{Ae8=new Set([".well-known","_admin","api","auth","cli","commerce-onboarding","dbos-queue-depth","health","hosted-run-pending","login","mcp","metrics","oauth","oauth-proxy","onboarding","org","report","reset-password"])});import{z as IY}from"zod";var Id0;var W0$=O(()=>{Y1();Td0();Id0=$0({name:"ORGANIZATION_CREATE",description:"Create a new organization. The caller becomes the owner automatically.",annotations:{title:"Create Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:IY.object({slug:IY.string().min(1).max(50).regex(/^[a-z0-9-]+$/,"Slug must be lowercase alphanumeric with hyphens").refine(($)=>!k50($),"Slug is reserved by Studio"),name:IY.string().min(1).max(255),description:IY.string().optional()}),outputSchema:IY.object({id:IY.string(),name:IY.string(),slug:IY.string(),logo:IY.string().nullable().optional(),metadata:IY.any().optional(),createdAt:IY.string().datetime().describe("ISO 8601 timestamp"),members:IY.array(IY.any()).optional()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=y1(Z);if(!G)throw Error("User ID required to create organization");let X=await Z.boundAuth.organization.create({name:$.name,slug:$.slug,metadata:$.description?{description:$.description}:void 0,userId:G});if(!X)throw Error("Failed to create organization");return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as WJ}from"zod";var Rd0;var K0$=O(()=>{Y1();Rd0=$0({name:"ORGANIZATION_LIST",description:"List organizations the current user belongs to.",annotations:{title:"List Organizations",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},_meta:{ui:{visibility:"app"}},inputSchema:WJ.object({userId:WJ.string().optional()}),outputSchema:WJ.object({organizations:WJ.array(WJ.object({id:WJ.string(),name:WJ.string(),slug:WJ.string(),logo:WJ.string().nullable().optional(),metadata:WJ.any().optional(),createdAt:WJ.string().datetime().describe("ISO 8601 timestamp")}))}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=y1(Z),X=$.userId||G;if(!X)throw Error("User ID required to list organizations");return{organizations:(await Z.boundAuth.organization.list(X)).map((Q)=>({...Q,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});import{z as VQ}from"zod";var qd0;var w0$=O(()=>{Y1();qd0=$0({name:"ORGANIZATION_GET",description:"Get an organization's details, members, and settings by slug or ID.",annotations:{title:"Get Organization",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:VQ.object({}),outputSchema:VQ.object({id:VQ.string(),name:VQ.string(),slug:VQ.string(),logo:VQ.string().nullable().optional(),metadata:VQ.any().optional(),createdAt:VQ.string().datetime().describe("ISO 8601 timestamp"),members:VQ.array(VQ.any()).optional(),invitations:VQ.array(VQ.any()).optional()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.boundAuth.organization.get(G);if(!X)throw Error("No active organization found");let Y=new Date,Q=X.invitations?.filter((J)=>new Date(J.expiresAt)>Y);return{...X,invitations:Q,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as KJ}from"zod";var Md0;var U0$=O(()=>{Y1();Md0=$0({name:"ORGANIZATION_UPDATE",description:"Update an organization's name or description.",annotations:{title:"Update Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:KJ.object({id:KJ.string(),name:KJ.string().min(1).max(255).optional(),description:KJ.string().optional()}),outputSchema:KJ.object({id:KJ.string(),name:KJ.string(),slug:KJ.string(),logo:KJ.string().nullable().optional(),metadata:KJ.any().optional(),createdAt:KJ.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G={};if($.name)G.name=$.name;if($.description)G.metadata={description:$.description};let X=await Z.boundAuth.organization.update({organizationId:$.id,data:G});if(!X)throw Error("Failed to update organization");return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as ti}from"zod";var kd0;var F0$=O(()=>{Y1();kd0=$0({name:"ORGANIZATION_DELETE",description:"Archive an organization (soft delete).",annotations:{title:"Delete Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:ti.object({id:ti.string()}),outputSchema:ti.object({success:ti.boolean(),id:ti.string()}),handler:async($,Z)=>{return M0(Z),await Z.access.check(),await Z.boundAuth.organization.update({organizationId:$.id,data:{metadata:{archived:!0,archivedAt:new Date().toISOString()}}}),{success:!0,id:$.id}}})});import{z as h$}from"zod";var ri,oi,wv,H0$,S50,ai,si,UN;var pw=O(()=>{ri=h$.object({title:h$.string(),url:h$.string(),icon:h$.string()}),oi=h$.object({registries:h$.record(h$.string(),h$.object({enabled:h$.boolean()})).describe("Per-registry enabled/disabled state. Key is connection ID. Absent registries are treated as enabled."),blockedMcps:h$.array(h$.string()).describe("List of MCP app_name or app_id values to hide from the store.")}),wv=h$.object({keyId:h$.string(),modelId:h$.string(),title:h$.string().optional()}).nullable(),H0$=h$.enum(["fast","smart","thinking","image","web_search","deep_research"]),S50=h$.enum(["fast","smart","thinking"]),ai=h$.object({tiers:h$.object({fast:wv,smart:wv,thinking:wv,image:wv,web_search:wv,deep_research:wv})}),si=h$.object({ids:h$.array(h$.string()).describe("Ordered list of custom virtual MCP agent ids to show on the home view.")}),UN=h$.object({id:h$.string().describe("Brand context ID"),name:h$.string().describe("Company name"),domain:h$.string().describe("Company domain (e.g. example.com)"),overview:h$.string().describe("Company overview / description"),logo:h$.string().nullable().optional().describe("Logo URL"),favicon:h$.string().nullable().optional().describe("Favicon URL"),ogImage:h$.string().nullable().optional().describe("OG image URL"),fonts:h$.object({heading:h$.string().optional().describe("Font family for headings"),body:h$.string().optional().describe("Font family for body text"),code:h$.string().optional().describe("Font family for code / monospace")}).nullable().optional().describe("Font families by semantic role"),colors:h$.object({primary:h$.string().optional().describe("Primary brand color (hex)"),secondary:h$.string().optional().describe("Secondary brand color (hex)"),accent:h$.string().optional().describe("Accent / highlight color (hex)"),background:h$.string().optional().describe("Background color (hex)"),foreground:h$.string().optional().describe("Foreground / text color (hex)")}).nullable().optional().describe("Semantic color palette"),images:h$.array(h$.record(h$.string(),h$.unknown())).nullable().optional().describe("Brand images"),metadata:h$.record(h$.string(),h$.unknown()).nullable().optional().describe("Extra design tokens (typography, components, spacing, layout, tone, etc.)"),archivedAt:h$.string().nullable().optional().describe("Archive timestamp (null to unarchive)"),isDefault:h$.boolean().optional().describe("Whether this is the default brand for the organization")})});import{z as xW}from"zod";var Sd0;var N0$=O(()=>{Y1();pw();Sd0=$0({name:"ORGANIZATION_SETTINGS_GET",description:"Get organization-level settings including sidebar configuration, store registry settings, simple model mode, and default home agents.",annotations:{title:"Get Organization Settings",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:xW.object({}),outputSchema:xW.object({organizationId:xW.string(),sidebar_items:xW.array(ri).nullable().optional(),enabled_plugins:xW.array(xW.string()).nullable().optional(),registry_config:oi.nullable().optional(),simple_mode:ai.nullable().optional(),default_home_agents:si.nullable().optional(),reports_only:xW.boolean().nullable().optional(),task_board_enabled:xW.boolean().optional(),createdAt:xW.string().datetime().optional().describe("ISO 8601 timestamp"),updatedAt:xW.string().datetime().optional().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.organizationSettings.get(G);if(!X)return{organizationId:G};return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}})});import{z as p7}from"zod";var Vd0;var B0$=O(()=>{Y1();pw();Vd0=$0({name:"ORGANIZATION_SETTINGS_UPDATE",description:"Update organization-level settings such as sidebar configuration, store registry settings, simple model mode, and default home agents.",annotations:{title:"Update Organization Settings",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:p7.object({organizationId:p7.string(),sidebar_items:p7.array(ri).optional(),enabled_plugins:p7.array(p7.string()).optional(),registry_config:oi.optional(),simple_mode:ai.optional(),default_home_agents:si.optional(),reports_only:p7.boolean().optional(),task_board_enabled:p7.boolean().optional()}),outputSchema:p7.object({organizationId:p7.string(),sidebar_items:p7.array(ri).nullable().optional(),enabled_plugins:p7.array(p7.string()).nullable().optional(),registry_config:oi.nullable().optional(),simple_mode:ai.nullable().optional(),default_home_agents:si.nullable().optional(),reports_only:p7.boolean().nullable().optional(),task_board_enabled:p7.boolean().optional(),createdAt:p7.string().datetime().describe("ISO 8601 timestamp"),updatedAt:p7.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{if(M0(Z),await Z.access.check(),Z.organization&&Z.organization.id!==$.organizationId)throw Error("Cannot update settings for a different organization");let G=await Z.storage.organizationSettings.upsert($.organizationId,{sidebar_items:$.sidebar_items,enabled_plugins:$.enabled_plugins,registry_config:$.registry_config,simple_mode:$.simple_mode,default_home_agents:$.default_home_agents,reports_only:$.reports_only,task_board_enabled:$.task_board_enabled});return{...G,createdAt:G.createdAt instanceof Date?G.createdAt.toISOString():G.createdAt,updatedAt:G.updatedAt instanceof Date?G.updatedAt.toISOString():G.updatedAt}}})});import{z as wJ}from"zod";var O0$,Cd0,_d0;var D0$=O(()=>{Y1();pw();O0$=UN.extend({organizationId:wJ.string(),archivedAt:wJ.string().nullable().optional().describe("ISO 8601 timestamp"),createdAt:wJ.string().describe("ISO 8601 timestamp"),updatedAt:wJ.string().describe("ISO 8601 timestamp")}),Cd0=$0({name:"BRAND_CONTEXT_LIST",description:"List all brand contexts (company profiles) for the current organization.",annotations:{title:"List Brand Contexts",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:wJ.object({includeArchived:wJ.boolean().optional().describe("Include archived brands in the list")}),outputSchema:wJ.object({items:wJ.array(O0$)}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");return{items:(await Z.storage.brandContext.list(G,{includeArchived:$.includeArchived})).map((Y)=>({...Y,archivedAt:Y.archivedAt instanceof Date?Y.archivedAt.toISOString():Y.archivedAt,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt,updatedAt:Y.updatedAt instanceof Date?Y.updatedAt.toISOString():Y.updatedAt}))}}}),_d0=$0({name:"BRAND_CONTEXT_GET",description:"Get a specific brand context by ID.",annotations:{title:"Get Brand Context",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:wJ.object({id:wJ.string().describe("Brand context ID")}),outputSchema:O0$.extend({organizationId:wJ.string()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.brandContext.get($.id,G);if(!X)throw Error("Brand context not found");return{...X,archivedAt:X.archivedAt instanceof Date?X.archivedAt.toISOString():X.archivedAt,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}})});import{z as AE}from"zod";var E0$,bd0,fd0,xd0;var L0$=O(()=>{Y1();pw();E0$=UN.extend({organizationId:AE.string(),createdAt:AE.string().describe("ISO 8601 timestamp"),updatedAt:AE.string().describe("ISO 8601 timestamp")}),bd0=$0({name:"BRAND_CONTEXT_CREATE",description:"Create a new brand context (company profile) for the current organization.",annotations:{title:"Create Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!1},inputSchema:UN.omit({id:!0}),outputSchema:E0$,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.brandContext.create(G,{name:$.name,domain:$.domain,overview:$.overview,logo:$.logo??null,favicon:$.favicon??null,ogImage:$.ogImage??null,fonts:$.fonts??null,colors:$.colors??null,images:$.images??null,metadata:$.metadata??null});return{...X,archivedAt:X.archivedAt instanceof Date?X.archivedAt.toISOString():X.archivedAt,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}}),fd0=$0({name:"BRAND_CONTEXT_UPDATE",description:"Update an existing brand context by ID.",annotations:{title:"Update Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:UN.partial().required({id:!0}),outputSchema:E0$,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!await Z.storage.brandContext.get($.id,G))throw Error("Brand context not found");let{id:Y,...Q}=$;if(Q.isDefault===!0)await Z.storage.brandContext.setDefault(Y,G);let J=await Z.storage.brandContext.update(Y,G,{name:Q.name,domain:Q.domain,overview:Q.overview,logo:Q.logo!==void 0?Q.logo??null:void 0,favicon:Q.favicon!==void 0?Q.favicon??null:void 0,ogImage:Q.ogImage!==void 0?Q.ogImage??null:void 0,fonts:Q.fonts!==void 0?Q.fonts??null:void 0,colors:Q.colors!==void 0?Q.colors??null:void 0,images:Q.images!==void 0?Q.images??null:void 0,metadata:Q.metadata!==void 0?Q.metadata??null:void 0,archivedAt:Q.archivedAt!==void 0?Q.archivedAt??null:void 0,isDefault:Q.isDefault===!1?!1:void 0});return{...J,archivedAt:J.archivedAt instanceof Date?J.archivedAt.toISOString():J.archivedAt,createdAt:J.createdAt instanceof Date?J.createdAt.toISOString():J.createdAt,updatedAt:J.updatedAt instanceof Date?J.updatedAt.toISOString():J.updatedAt}}}),xd0=$0({name:"BRAND_CONTEXT_DELETE",description:"Archive a brand context by ID (soft delete).",annotations:{title:"Archive Brand Context",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:AE.object({id:AE.string().describe("Brand context ID")}),outputSchema:AE.object({success:AE.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!await Z.storage.brandContext.get($.id,G))throw Error("Brand context not found");return await Z.storage.brandContext.update($.id,G,{archivedAt:new Date().toISOString(),isDefault:!1}),{success:!0}}})});async function V50($,Z,G){let X=$.trim();if(!X.startsWith("http"))X=`https://${X}`;let Y=await fetch("https://api.firecrawl.dev/v1/scrape",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${Z}`},body:JSON.stringify({url:X,formats:["branding"]})});if(!Y.ok){let H=await Y.text().catch(()=>"");throw Error(`Firecrawl API error: ${Y.status} ${H.slice(0,200)}`)}let Q=await Y.json();if(!Q.success||!Q.data?.branding)return null;let J=Q.data.branding,W=Q.data.metadata??{},K=Re8(J,W);return{name:W.title?.split(/[|\u2013\u2014]|\s+-\s+/).map((H)=>H.trim()).filter(Boolean)?.slice().sort((H,N)=>H.length-N.length)[0]??W.ogSiteName??G??$,domain:$,overview:W.description??"",logo:K.logo,favicon:K.favicon,ogImage:K.ogImage,fonts:K.fonts,colors:K.colors,images:null,metadata:Object.keys(K.metadata).length>0?K.metadata:null}}function Re8($,Z){let G=$.images??{},X=$.colors??{},Y={};for(let[U,F]of Object.entries(X))if(typeof F==="string"&&F&&Te8.has(U))Y[U]=F;let Q={},W=($.typography??{}).fontFamilies??{};for(let[U,F]of Object.entries(W))if(typeof F==="string"&&F){let H=Ie8[U.toLowerCase()];if(H&&!Q[H])Q[H]=F}let K=$.fonts;if(Array.isArray(K))for(let U of K){let F=U.family;if(typeof F==="string"&&F&&!Q.body)Q.body=F}let w={};for(let U of["typography","components","spacing","layout","animations","icons","tone","personality","colorScheme"])if($[U]!==void 0)w[U]=$[U];return{logo:G.logo??null,favicon:G.favicon??null,ogImage:G.ogImage??Z.ogImage??null,fonts:Object.keys(Q).length>0?Q:null,colors:Object.keys(Y).length>0?Y:null,metadata:w}}var Te8,Ie8;var vd0=O(()=>{Te8=new Set(["primary","secondary","accent","background","foreground"]),Ie8={heading:"heading",headings:"heading",head:"heading",title:"heading",body:"body",primary:"body",text:"body",code:"code",monospace:"code",mono:"code"}});import{z as C50}from"zod";var qe8,yd0;var z0$=O(()=>{Y1();vd0();pw();qe8=UN.pick({id:!0,name:!0,domain:!0,overview:!0,logo:!0,favicon:!0,ogImage:!0,fonts:!0,colors:!0}).extend({success:C50.boolean()}),yd0=$0({name:"BRAND_CONTEXT_EXTRACT",description:"Extract brand context (colors, fonts, logos) from a website URL using Firecrawl.",annotations:{title:"Extract Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:C50.object({domain:C50.string().describe("Website domain to extract brand from"),brandId:C50.string().optional().describe("Existing brand context ID to update (creates new if omitted)")}),outputSchema:qe8,modelSummary:($)=>$.success?`Brand saved (id=${$.id}, name=${$.name}, domain=${$.domain}). The UI rendered the logo, colors, fonts, and overview.`:"Brand extraction failed.",handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=Z.firecrawlApiKey;if(!X)throw Error("FIRECRAWL_API_KEY is not configured. Set the environment variable to enable brand extraction.");let Y=await V50($.domain,X,$.domain);if(!Y)throw Error("Firecrawl did not return branding data for this URL");let Q={name:Y.name,domain:Y.domain,overview:Y.overview,logo:Y.logo,favicon:Y.favicon,ogImage:Y.ogImage,fonts:Y.fonts,colors:Y.colors,images:Y.images,metadata:Y.metadata},J=$.brandId?await(async()=>{if(!await Z.storage.brandContext.get($.brandId,G))throw Error("Brand context not found");return Z.storage.brandContext.update($.brandId,G,Q)})():await Z.storage.brandContext.create(G,Q);return{id:J.id,name:J.name,domain:J.domain,overview:J.overview,logo:J.logo,favicon:J.favicon,ogImage:J.ogImage,fonts:J.fonts,colors:J.colors,success:!0}}})});function j0$($){let Z=$.metadata??{};return{id:$.id,name:$.name,domain:$.domain||void 0,colors:$.colors??void 0,fonts:$.fonts??void 0,assets:$.logo||$.favicon||$.ogImage?{logo:$.logo??void 0,favicon:$.favicon??void 0,ogImage:$.ogImage??void 0}:void 0,overview:$.overview||void 0,tagline:typeof Z.tagline==="string"?Z.tagline:void 0,tone:typeof Z.tone==="string"?Z.tone:void 0,metadata:(()=>{let G=Object.fromEntries(Object.entries(Z).filter(([X])=>X!=="tagline"&&X!=="tone"));return Object.keys(G).length>0?G:void 0})()}}var gd0,hd0;var P0$=O(()=>{au0();Y1();gd0=$0({name:"BRAND_GET",description:"Get a brand context by ID. Omit the ID to get the default brand for the organization.",annotations:{title:"Get Brand",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:j50,outputSchema:ii,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=$.id?await Z.storage.brandContext.get($.id,G):await Z.storage.brandContext.getDefault(G);if(!X)throw Error($.id?"Brand not found":"No default brand configured");return j0$(X)}}),hd0=$0({name:"BRAND_LIST",description:"List all active brands for the current organization.",annotations:{title:"List Brands",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:P50,outputSchema:A50,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");return{items:(await Z.storage.brandContext.list(G)).map(j0$)}}})});import{resolveTxt as Me8}from"dns/promises";function cd0($){return`${ke8}.${$.toLowerCase()}`}function A0$(){return`deco-verify-${crypto.randomUUID().replace(/-/g,"")}`}async function T0$($,Z,G=Me8){if(!Z)return!1;try{return(await G(cd0($))).some((Y)=>Y.join("").trim()===Z)}catch{return!1}}var ke8="_deco-verify";var I0$=()=>{};import{z as T5}from"zod";function FN($){let Z=$.verificationStatus==="pending"&&Boolean($.verificationToken);return{id:$.id,domain:$.domain,joinMode:$.joinMode,verificationStatus:$.verificationStatus,verificationMethod:$.verificationMethod,verifiedAt:$.verifiedAt?new Date($.verifiedAt).toISOString():null,recordName:Z?cd0($.domain):null,recordValue:Z?$.verificationToken:null}}function Ve8($){let Z=$.toLowerCase().trim();if(!Se8.test(Z))throw Error(`Invalid domain format: "${Z}". Must be a valid domain like "acme.com"`);if(UJ.has(Z))throw Error(`Cannot claim generic email domain "${Z}". Only corporate domains are allowed.`);return Z}var Se8,ud0,_50,dd0,ld0,md0,id0,nd0;var R0$=O(()=>{CQ();I0$();Y1();Se8=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/,ud0=T5.enum(["off","auto","request"]),_50=T5.object({id:T5.string(),domain:T5.string(),joinMode:ud0,verificationStatus:T5.enum(["pending","verified"]),verificationMethod:T5.enum(["email","dns"]).nullable(),verifiedAt:T5.string().nullable(),recordName:T5.string().nullable(),recordValue:T5.string().nullable()});dd0=$0({name:"ORGANIZATION_DOMAIN_LIST",description:"List the email domains claimed by an organization.",annotations:{title:"List Organization Domains",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:T5.object({}),outputSchema:T5.object({domains:T5.array(_50)}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z);return{domains:(await Z.storage.organizationDomains.listByOrganizationId(G.id)).map(FN)}}}),ld0=$0({name:"ORGANIZATION_DOMAIN_ADD",description:"Claim an email domain for an organization. If the caller's verified email matches the domain it is trusted immediately; otherwise it requires DNS verification.",annotations:{title:"Add Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:T5.object({domain:T5.string().min(1).max(255).describe("Domain to claim, e.g. acme.com"),joinMode:ud0.optional().describe("Initial join mode (only applied when the domain is trusted immediately via email match).")}),outputSchema:_50,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=Ve8($.domain),Q=Z.auth.user?.email?.split("@")[1]?.toLowerCase(),J=Boolean(Z.auth.user?.emailVerified)&&Q===X,W=await Z.storage.organizationDomains.getByOrgAndDomain(G.id,X);if(W){if(W.verificationStatus!=="verified"&&J){let w=await Z.storage.organizationDomains.markVerified(W.id,"email");return FN(w)}return FN(W)}let K=J?await Z.storage.organizationDomains.add(G.id,X,{joinMode:$.joinMode??"off",verificationStatus:"verified",verificationMethod:"email"}):await Z.storage.organizationDomains.add(G.id,X,{joinMode:"off",verificationStatus:"pending",verificationToken:A0$()});return FN(K)}}),md0=$0({name:"ORGANIZATION_DOMAIN_UPDATE",description:"Set the join mode for a claimed domain. Discoverable modes (auto/request) require the domain to be verified.",annotations:{title:"Update Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:T5.object({id:T5.string(),joinMode:ud0}),outputSchema:_50,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");if($.joinMode!=="off"&&X.verificationStatus!=="verified")throw Error("Verify the domain before enabling auto-join or requests.");let Y=await Z.storage.organizationDomains.updateJoinMode($.id,$.joinMode);return FN(Y)}}),id0=$0({name:"ORGANIZATION_DOMAIN_VERIFY",description:"Check the DNS TXT record for a pending domain and mark it verified if present.",annotations:{title:"Verify Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:T5.object({id:T5.string()}),outputSchema:T5.object({verified:T5.boolean(),domain:_50}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");if(X.verificationStatus==="verified")return{verified:!0,domain:FN(X)};if(!X.verificationToken)throw Error("Domain has no pending DNS verification.");if(!await T0$(X.domain,X.verificationToken))return{verified:!1,domain:FN(X)};let Q=await Z.storage.organizationDomains.markVerified($.id,"dns");return{verified:!0,domain:FN(Q)}}}),nd0=$0({name:"ORGANIZATION_DOMAIN_REMOVE",description:"Remove a claimed domain from an organization.",annotations:{title:"Remove Organization Domain",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:T5.object({id:T5.string()}),outputSchema:T5.object({success:T5.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");return await Z.storage.organizationDomains.removeById($.id),{success:!0}}})});function HN($){return($ instanceof Error?$.message.toLowerCase():"").includes("already a member")}import{z as E9}from"zod";var Ce8,pd0,td0,rd0;var q0$=O(()=>{Y1();q4();Ce8=E9.object({id:E9.string(),userId:E9.string(),status:E9.enum(["pending","approved","denied"]),createdAt:E9.string(),user:E9.object({id:E9.string(),name:E9.string(),email:E9.string(),image:E9.string().nullable()}).nullable()}),pd0=$0({name:"ORGANIZATION_JOIN_REQUEST_LIST",description:"List pending requests to join the organization.",annotations:{title:"List Join Requests",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({}),outputSchema:E9.object({requests:E9.array(Ce8)}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z);return{requests:(await Z.storage.organizationJoinRequests.listPendingWithUser(G.id)).map((Y)=>({id:Y.id,userId:Y.userId,status:Y.status,createdAt:new Date(Y.createdAt).toISOString(),user:Y.user}))}}}),td0=$0({name:"ORGANIZATION_JOIN_REQUEST_APPROVE",description:"Approve a pending join request, adding the user as a member.",annotations:{title:"Approve Join Request",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({requestId:E9.string()}),outputSchema:E9.object({success:E9.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationJoinRequests.getById($.requestId);if(!X||X.organizationId!==G.id)throw Error("Join request not found");if(X.status!=="pending")throw Error("Join request has already been decided");let Y=y1(Z);if(!await Z.storage.organizationJoinRequests.decide(X.id,"approved",Y??X.userId))return{success:!0};try{await Z.boundAuth.organization.addMember({organizationId:G.id,userId:X.userId,role:["user"]})}catch(J){if(!HN(J))throw J}if(Y)i1.capture({distinctId:Y,event:"organization_join_request_approved",groups:{organization:G.id},properties:{organization_id:G.id,user_id:X.userId}});return{success:!0}}}),rd0=$0({name:"ORGANIZATION_JOIN_REQUEST_DENY",description:"Deny a pending join request.",annotations:{title:"Deny Join Request",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({requestId:E9.string()}),outputSchema:E9.object({success:E9.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationJoinRequests.getById($.requestId);if(!X||X.organizationId!==G.id)throw Error("Join request not found");if(X.status!=="pending")throw Error("Join request has already been decided");let Y=y1(Z);if(await Z.storage.organizationJoinRequests.decide(X.id,"denied",Y??X.userId)&&Y)i1.capture({distinctId:Y,event:"organization_join_request_denied",groups:{organization:G.id},properties:{organization_id:G.id,user_id:X.userId}});return{success:!0}}})});import{z as PX}from"zod";var od0;var M0$=O(()=>{q4();Y1();p3();od0=$0({name:"ORGANIZATION_MEMBER_ADD",description:"Invite a member to the organization by email with an assigned role.",annotations:{title:"Add Organization Member",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:PX.object({organizationId:PX.string().optional(),userId:PX.string(),role:PX.array(PX.string())}),outputSchema:PX.object({id:PX.string(),organizationId:PX.string(),userId:PX.string(),role:PX.union([PX.string(),PX.array(PX.string())]),createdAt:PX.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(G!==Z.organization?.id)throw Error("Organization ID does not match authenticated organization");if(!T60(Z.auth.user?.role,$.role))throw Error(`Insufficient privileges to assign role "${$.role.join(",")}"`);let X=await Z.boundAuth.organization.addMember({organizationId:G,userId:$.userId,role:$.role});if(!X)throw Error("Failed to add member");let Y=y1(Z);if(Y)i1.capture({distinctId:Y,event:"organization_member_added",groups:{organization:G},properties:{organization_id:G,added_user_id:$.userId,role:$.role}});return{...X,role:X.role,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as Uv}from"zod";var ad0;var k0$=O(()=>{q4();Y1();ad0=$0({name:"ORGANIZATION_MEMBER_REMOVE",description:"Remove a member from the organization. Revokes all their access immediately.",annotations:{title:"Remove Organization Member",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Uv.object({organizationId:Uv.string().optional(),memberIdOrEmail:Uv.string()}),outputSchema:Uv.object({success:Uv.boolean(),memberIdOrEmail:Uv.string()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");await Z.boundAuth.organization.removeMember({organizationId:G,memberIdOrEmail:$.memberIdOrEmail});let X=y1(Z);if(X)i1.capture({distinctId:X,event:"organization_member_removed",groups:{organization:G},properties:{organization_id:G,member_id_or_email:$.memberIdOrEmail}});return{success:!0,memberIdOrEmail:$.memberIdOrEmail}}})});import{z as t7}from"zod";var sd0;var S0$=O(()=>{Y1();sd0=$0({name:"ORGANIZATION_MEMBER_LIST",description:"List all members in the organization with their roles.",annotations:{title:"List Organization Members",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:t7.object({limit:t7.number().optional(),offset:t7.number().optional()}),outputSchema:t7.object({members:t7.array(t7.object({id:t7.string(),organizationId:t7.string(),userId:t7.string(),role:t7.string(),createdAt:t7.string().datetime().describe("ISO 8601 timestamp"),user:t7.object({id:t7.string(),name:t7.string(),email:t7.string(),image:t7.string().optional()}).optional()}))}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.boundAuth.organization.listMembers({organizationId:G,limit:$.limit,offset:$.offset});return{members:(Array.isArray(X)?X:[]).map((Q)=>({...Q,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});import{z as SZ}from"zod";var ed0;var V0$=O(()=>{q4();Y1();p3();ed0=$0({name:"ORGANIZATION_MEMBER_UPDATE_ROLE",description:"Change a member's role (e.g., admin, member) within the organization.",annotations:{title:"Update Member Role",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:SZ.object({organizationId:SZ.string().optional(),memberId:SZ.string(),role:SZ.array(SZ.string())}),outputSchema:SZ.object({id:SZ.string(),organizationId:SZ.string(),userId:SZ.string(),role:SZ.union([SZ.literal("admin"),SZ.literal("member"),SZ.literal("owner")]),createdAt:SZ.string().datetime().describe("ISO 8601 timestamp"),user:SZ.object({email:SZ.string(),name:SZ.string(),image:SZ.string().optional()})}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!T60(Z.auth.user?.role,$.role))throw Error(`Insufficient privileges to assign role "${$.role.join(",")}"`);let X=await Z.boundAuth.organization.updateMemberRole({organizationId:G,memberId:$.memberId,role:$.role});if(!X)throw Error("Failed to update member role");Z.invalidateMemberRole?.(X.userId,G);let Y=y1(Z);if(Y)i1.capture({distinctId:Y,event:"organization_member_role_updated",groups:{organization:G},properties:{organization_id:G,member_id:$.memberId,target_user_id:X.userId,new_role:Array.isArray($.role)?$.role.join(","):$.role}});return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});var C0$=O(()=>{W0$();K0$();w0$();U0$();F0$();N0$();B0$();D0$();L0$();z0$();P0$();R0$();q0$();M0$();k0$();S0$();V0$()});var RY="super-agent",_0$="task-board.item.updated",b0$="task-board.item.deleted";import{z as u6}from"zod";var ei,TE,be8,f0$,Fv;var IE=O(()=>{ei=u6.enum(["triage","todo","in_progress","in_review","done"]),TE=u6.enum(["none","low","medium","high","urgent"]),be8=u6.object({threadId:u6.string(),virtualMcpId:u6.string().nullable(),status:u6.enum(["in_progress","requires_action","failed","completed","expired"]).nullable(),title:u6.string().nullable(),lastMessage:u6.string().nullable(),hasPreview:u6.boolean(),createdAt:u6.string()}),f0$=u6.object({url:u6.string(),number:u6.number(),repoOwner:u6.string(),repoName:u6.string(),createdAt:u6.string(),title:u6.string().nullable(),body:u6.string().nullable(),state:u6.enum(["open","closed"]).nullable(),draft:u6.boolean().nullable(),merged:u6.boolean().nullable()}),Fv=u6.object({id:u6.string(),organizationId:u6.string(),title:u6.string(),description:u6.string().nullable(),status:ei,priority:TE,assigneeId:u6.string().nullable(),assignedBy:u6.string().nullable(),dueDate:u6.string().datetime().nullable(),threads:u6.array(be8),createdBy:u6.string(),createdAt:u6.string().datetime(),updatedBy:u6.string(),updatedAt:u6.string().datetime()})});async function b50($,Z,G){if(G===RY)return;let{members:X}=await $.boundAuth.organization.listMembers({organizationId:Z,filterField:"userId",filterValue:G});if(!X.some((Y)=>Y.userId===G))throw Error("assigneeId is not a member of the organization")}var $l0=O(()=>{IE()});async function vW($,Z){if(!(await $.storage.organizationSettings.get(Z))?.task_board_enabled)throw Error("Task board is not enabled for this organization")}async function Zl0($,Z,G){let X;try{return await Promise.race([$.aiProviders.listModels(Z,G),new Promise((Q,J)=>{X=setTimeout(()=>J(Error("listModels timeout")),fe8)})])}finally{if(X)clearTimeout(X)}}function xe8($,Z){switch($){case"fast":return Z.chat.fast;case"smart":return Z.chat.smart;case"thinking":return Z.chat.thinking;case"image":return Z.image;case"web_search":return Z.webSearch;case"deep_research":return Z.deepResearch}}function Gl0($,Z,G){let X=$.find((Y)=>Y.modelId===Z);return{title:X?.title??G??Z,providerId:X?.providerId,capabilities:X?.capabilities,limits:X?.limits??null}}async function FJ($,Z){let G=$.organization?.id;if(!G)throw Error("resolveTier called without an organization");let Y=(await $.storage.organizationSettings.get(G))?.simple_mode?.tiers?.[Z]??null,Q=await $.storage.aiProviderKeys.list({organizationId:G});if(Y&&Q.some((U)=>U.id===Y.keyId)){let U=await Zl0($,Y.keyId,G).catch(()=>[]);return{credentialId:Y.keyId,modelId:Y.modelId,modelMeta:Gl0(U,Y.modelId,Y.title)}}if(Q.length===0)throw new Hv(Z);let J={};await Promise.all(Q.map(async(U)=>{J[U.id]=await Zl0($,U.id,G).catch(()=>[])}));let W=Q.map((U)=>({id:U.id,providerId:U.providerId,label:U.label,presetId:U.presetId,createdBy:U.createdBy,createdAt:U.createdAt})),K=Cb0(W,J),w=xe8(Z,K);if(!w)throw new Hv(Z);return{credentialId:w.keyId,modelId:w.modelId,modelMeta:Gl0(J[w.keyId]??[],w.modelId,w.title)}}async function x0$($,Z,G){let X=$.organization?.id;if(!X)throw Error("resolveSpecificModel called without an organization");let Y=await Zl0($,Z,X).catch(()=>[]);return{credentialId:Z,modelId:G,modelMeta:Gl0(Y,G)}}async function _Q($,Z){try{return await FJ($,Z)}catch(G){if(G instanceof Hv)return null;return console.warn(`[resolveTier] tier "${Z}" resolution failed:`,G),null}}var Hv,fe8=5000;var Nv=O(()=>{R8();Hv=class Hv extends Error{tier;constructor($){super(`No model available for tier "${$}". Connect a provider or configure the tier in organization settings.`);this.tier=$;this.name="TierUnavailableError"}}});function f50($){return $.sandboxProviderKind==="agent-sandbox"&&$.harnessId==="decopilot"}function v0$($){return $.harnessId==="decopilot"&&($.sandboxProviderKind==null||$.sandboxProviderKind==="agent-sandbox")}function ye8($){return{type:"data-run-status",id:"run-status",data:{stage:$}}}function y0$($){if(!$||typeof $!=="object")return!1;return $.type==="data-run-status"}async function tw($,Z,G){if(!$)return;try{await $.publishRawChunk(Z,ye8(G))}catch{}}var ve8,$n,dw5;var Zn=O(()=>{ve8=["waiting-runner","starting-run","gathering-context","preparing-tools","starting-assistant","analyzing-scope"],$n=["gathering-context","preparing-tools","starting-assistant","analyzing-scope"],dw5=new Set(ve8)});function x50(){return crypto.randomUUID()}var Yl0=_((iw5,c0$)=>{var{defineProperty:Xl0,getOwnPropertyDescriptor:ge8,getOwnPropertyNames:he8}=Object,ce8=Object.prototype.hasOwnProperty,ue8=($,Z)=>{for(var G in Z)Xl0($,G,{get:Z[G],enumerable:!0})},de8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of he8(Z))if(!ce8.call($,Y)&&Y!==G)Xl0($,Y,{get:()=>Z[Y],enumerable:!(X=ge8(Z,Y))||X.enumerable})}return $},le8=($)=>de8(Xl0({},"__esModule",{value:!0}),$),g0$={};ue8(g0$,{SYMBOL_FOR_REQ_CONTEXT:()=>h0$,getContext:()=>me8});c0$.exports=le8(g0$);var h0$=Symbol.for("@vercel/request-context");function me8(){return globalThis[h0$]?.get?.()??{}}});var Gn=_((nw5,l0$)=>{var{defineProperty:Ql0,getOwnPropertyDescriptor:ie8,getOwnPropertyNames:ne8}=Object,pe8=Object.prototype.hasOwnProperty,te8=($,Z)=>{for(var G in Z)Ql0($,G,{get:Z[G],enumerable:!0})},re8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of ne8(Z))if(!pe8.call($,Y)&&Y!==G)Ql0($,Y,{get:()=>Z[Y],enumerable:!(X=ie8(Z,Y))||X.enumerable})}return $},oe8=($)=>re8(Ql0({},"__esModule",{value:!0}),$),u0$={};te8(u0$,{VercelOidcTokenError:()=>d0$});l0$.exports=oe8(u0$);class d0$ extends Error{constructor($,Z){super($);this.name="VercelOidcTokenError",this.cause=Z}toString(){if(this.cause)return`${this.name}: ${this.message}: ${this.cause}`;return`${this.name}: ${this.message}`}}});var p0$=_((pw5,n0$)=>{var{create:ae8,defineProperty:v50,getOwnPropertyDescriptor:se8,getOwnPropertyNames:ee8,getPrototypeOf:$06}=Object,Z06=Object.prototype.hasOwnProperty,G06=($,Z)=>{for(var G in Z)v50($,G,{get:Z[G],enumerable:!0})},m0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of ee8(Z))if(!Z06.call($,Y)&&Y!==G)v50($,Y,{get:()=>Z[Y],enumerable:!(X=se8(Z,Y))||X.enumerable})}return $},Wl0=($,Z,G)=>(G=$!=null?ae8($06($)):{},m0$(Z||!$||!$.__esModule?v50(G,"default",{value:$,enumerable:!0}):G,$)),X06=($)=>m0$(v50({},"__esModule",{value:!0}),$),i0$={};G06(i0$,{findRootDir:()=>J06,getUserDataDir:()=>W06});n0$.exports=X06(i0$);var Xn=Wl0(c0("path")),Y06=Wl0(c0("fs")),Jl0=Wl0(c0("os")),Q06=Gn();function J06(){try{let $=process.cwd();while($!==Xn.default.dirname($)){let Z=Xn.default.join($,".vercel");if(Y06.default.existsSync(Z))return $;$=Xn.default.dirname($)}}catch($){throw new Q06.VercelOidcTokenError("Token refresh only supported in node server environments")}return null}function W06(){if(process.env.XDG_DATA_HOME)return process.env.XDG_DATA_HOME;switch(Jl0.default.platform()){case"darwin":return Xn.default.join(Jl0.default.homedir(),"Library/Application Support");case"linux":return Xn.default.join(Jl0.default.homedir(),".local/share");case"win32":if(process.env.LOCALAPPDATA)return process.env.LOCALAPPDATA;return null;default:return null}}});var $1$=_((tw5,e0$)=>{var{create:K06,defineProperty:y50,getOwnPropertyDescriptor:w06,getOwnPropertyNames:U06,getPrototypeOf:F06}=Object,H06=Object.prototype.hasOwnProperty,N06=($,Z)=>{for(var G in Z)y50($,G,{get:Z[G],enumerable:!0})},t0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of U06(Z))if(!H06.call($,Y)&&Y!==G)y50($,Y,{get:()=>Z[Y],enumerable:!(X=w06(Z,Y))||X.enumerable})}return $},r0$=($,Z,G)=>(G=$!=null?K06(F06($)):{},t0$(Z||!$||!$.__esModule?y50(G,"default",{value:$,enumerable:!0}):G,$)),B06=($)=>t0$(y50({},"__esModule",{value:!0}),$),o0$={};N06(o0$,{isValidAccessToken:()=>L06,readAuthConfig:()=>D06,writeAuthConfig:()=>E06});e0$.exports=B06(o0$);var Yn=r0$(c0("fs")),a0$=r0$(c0("path")),O06=Qn();function s0$(){let $=(0,O06.getVercelDataDir)();if(!$)throw Error(`Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`);return a0$.join($,"auth.json")}function D06(){try{let $=s0$();if(!Yn.existsSync($))return null;let Z=Yn.readFileSync($,"utf8");if(!Z)return null;return JSON.parse(Z)}catch($){return null}}function E06($){let Z=s0$(),G=a0$.dirname(Z);if(!Yn.existsSync(G))Yn.mkdirSync(G,{mode:504,recursive:!0});Yn.writeFileSync(Z,JSON.stringify($,null,2),{mode:384})}function L06($,Z=0){if(!$.token)return!1;if(typeof $.expiresAt!=="number")return!0;let G=Math.floor(Date.now()/1000),X=Z/1000;return $.expiresAt>=G+X}});var Y1$=_((rw5,X1$)=>{var{defineProperty:Ul0,getOwnPropertyDescriptor:z06,getOwnPropertyNames:j06}=Object,P06=Object.prototype.hasOwnProperty,A06=($,Z)=>{for(var G in Z)Ul0($,G,{get:Z[G],enumerable:!0})},T06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of j06(Z))if(!P06.call($,Y)&&Y!==G)Ul0($,Y,{get:()=>Z[Y],enumerable:!(X=z06(Z,Y))||X.enumerable})}return $},I06=($)=>T06(Ul0({},"__esModule",{value:!0}),$),Z1$={};A06(Z1$,{processTokenResponse:()=>S06,refreshTokenRequest:()=>k06});X1$.exports=I06(Z1$);var Kl0=c0("os"),R06="https://vercel.com",q06="cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp",G1$=`@vercel/oidc node-${process.version} ${(0,Kl0.platform)()} (${(0,Kl0.arch)()}) ${(0,Kl0.hostname)()}`,wl0=null;async function M06(){if(wl0)return wl0;let $=`${R06}/.well-known/openid-configuration`,Z=await fetch($,{headers:{"user-agent":G1$}});if(!Z.ok)throw Error("Failed to discover OAuth endpoints");let G=await Z.json();if(!G||typeof G.token_endpoint!=="string")throw Error("Invalid OAuth discovery response");let X=G.token_endpoint;return wl0=X,X}async function k06($){let Z=await M06();return await fetch(Z,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded","user-agent":G1$},body:new URLSearchParams({client_id:q06,grant_type:"refresh_token",...$})})}async function S06($){let Z=await $.json();if(!$.ok){let G=typeof Z==="object"&&Z&&"error"in Z?String(Z.error):"Token refresh failed";return[Error(G)]}if(typeof Z!=="object"||Z===null)return[Error("Invalid token response")];if(typeof Z.access_token!=="string")return[Error("Missing access_token in response")];if(Z.token_type!=="Bearer")return[Error("Invalid token_type in response")];if(typeof Z.expires_in!=="number")return[Error("Missing expires_in in response")];return[null,Z]}});var Hl0=_((ow5,K1$)=>{var{defineProperty:Fl0,getOwnPropertyDescriptor:V06,getOwnPropertyNames:C06}=Object,_06=Object.prototype.hasOwnProperty,b06=($,Z)=>{for(var G in Z)Fl0($,G,{get:Z[G],enumerable:!0})},f06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of C06(Z))if(!_06.call($,Y)&&Y!==G)Fl0($,Y,{get:()=>Z[Y],enumerable:!(X=V06(Z,Y))||X.enumerable})}return $},x06=($)=>f06(Fl0({},"__esModule",{value:!0}),$),Q1$={};b06(Q1$,{AccessTokenMissingError:()=>J1$,RefreshAccessTokenFailedError:()=>W1$});K1$.exports=x06(Q1$);class J1$ extends Error{constructor(){super("No authentication found. Please log in with the Vercel CLI (vercel login).");this.name="AccessTokenMissingError"}}class W1$ extends Error{constructor($){super("Failed to refresh authentication token.",{cause:$});this.name="RefreshAccessTokenFailedError"}}});var Qn=_((aw5,N1$)=>{var{create:v06,defineProperty:g50,getOwnPropertyDescriptor:y06,getOwnPropertyNames:g06,getPrototypeOf:h06}=Object,c06=Object.prototype.hasOwnProperty,u06=($,Z)=>{for(var G in Z)g50($,G,{get:Z[G],enumerable:!0})},U1$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of g06(Z))if(!c06.call($,Y)&&Y!==G)g50($,Y,{get:()=>Z[Y],enumerable:!(X=y06(Z,Y))||X.enumerable})}return $},F1$=($,Z,G)=>(G=$!=null?v06(h06($)):{},U1$(Z||!$||!$.__esModule?g50(G,"default",{value:$,enumerable:!0}):G,$)),d06=($)=>U1$(g50({},"__esModule",{value:!0}),$),H1$={};u06(H1$,{assertVercelOidcTokenResponse:()=>Nl0,findProjectInfo:()=>n06,getTokenPayload:()=>r06,getVercelDataDir:()=>l06,getVercelOidcToken:()=>i06,getVercelToken:()=>m06,isExpired:()=>o06,loadToken:()=>t06,saveToken:()=>p06});N1$.exports=d06(H1$);var Jn=F1$(c0("path")),RE=F1$(c0("fs")),Dv=Gn(),h50=p0$(),Bv=$1$(),w1$=Y1$(),Ov=Hl0();function l06(){let Z=(0,h50.getUserDataDir)();if(!Z)return null;return Jn.join(Z,"com.vercel.cli")}async function m06($){let Z=(0,Bv.readAuthConfig)();if(!Z?.token)throw new Ov.AccessTokenMissingError;if((0,Bv.isValidAccessToken)(Z,$?.expirationBufferMs))return Z.token;if(!Z.refreshToken)throw(0,Bv.writeAuthConfig)({}),new Ov.RefreshAccessTokenFailedError("No refresh token available");try{let G=await(0,w1$.refreshTokenRequest)({refresh_token:Z.refreshToken}),[X,Y]=await(0,w1$.processTokenResponse)(G);if(X||!Y)throw(0,Bv.writeAuthConfig)({}),new Ov.RefreshAccessTokenFailedError(X);let Q={token:Y.access_token,expiresAt:Math.floor(Date.now()/1000)+Y.expires_in};if(Y.refresh_token)Q.refreshToken=Y.refresh_token;return(0,Bv.writeAuthConfig)(Q),Q.token}catch(G){if((0,Bv.writeAuthConfig)({}),G instanceof Ov.AccessTokenMissingError||G instanceof Ov.RefreshAccessTokenFailedError)throw G;throw new Ov.RefreshAccessTokenFailedError(G)}}async function i06($,Z,G){let X=`https://api.vercel.com/v1/projects/${Z}/token?source=vercel-oidc-refresh${G?`&teamId=${G}`:""}`,Y=await fetch(X,{method:"POST",headers:{Authorization:`Bearer ${$}`}});if(!Y.ok)throw new Dv.VercelOidcTokenError(`Failed to refresh OIDC token: ${Y.statusText}`);let Q=await Y.json();return Nl0(Q),Q}function Nl0($){if(!$||typeof $!=="object")throw TypeError("Vercel OIDC token is malformed. Expected an object. Please run `vc env pull` and try again");if(!("token"in $)||typeof $.token!=="string")throw TypeError("Vercel OIDC token is malformed. Expected a string-valued token property. Please run `vc env pull` and try again")}function n06(){let $=(0,h50.findRootDir)();if(!$)throw new Dv.VercelOidcTokenError("Unable to find project root directory. Have you linked your project with `vc link?`");let Z=Jn.join($,".vercel","project.json");if(!RE.existsSync(Z))throw new Dv.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");let G=JSON.parse(RE.readFileSync(Z,"utf8"));if(typeof G.projectId!=="string"&&typeof G.orgId!=="string")throw TypeError("Expected a string-valued projectId property. Try running `vc link` to re-link your project.");return{projectId:G.projectId,teamId:G.orgId}}function p06($,Z){let G=(0,h50.getUserDataDir)();if(!G)throw new Dv.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");let X=Jn.join(G,"com.vercel.token",`${Z}.json`),Y=JSON.stringify($);RE.mkdirSync(Jn.dirname(X),{mode:504,recursive:!0}),RE.writeFileSync(X,Y),RE.chmodSync(X,432);return}function t06($){let Z=(0,h50.getUserDataDir)();if(!Z)throw new Dv.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");let G=Jn.join(Z,"com.vercel.token",`${$}.json`);if(!RE.existsSync(G))return null;let X=JSON.parse(RE.readFileSync(G,"utf8"));return Nl0(X),X}function r06($){let Z=$.split(".");if(Z.length!==3)throw new Dv.VercelOidcTokenError("Invalid token. Please run `vc env pull` and try again");let G=Z[1].replace(/-/g,"+").replace(/_/g,"/"),X=G.padEnd(G.length+(4-G.length%4)%4,"=");return JSON.parse(Buffer.from(X,"base64").toString("utf8"))}function o06($,Z=0){return $.exp*1000<Date.now()+Z}});var E1$=_((sw5,D1$)=>{var{defineProperty:Bl0,getOwnPropertyDescriptor:a06,getOwnPropertyNames:s06}=Object,e06=Object.prototype.hasOwnProperty,$16=($,Z)=>{for(var G in Z)Bl0($,G,{get:Z[G],enumerable:!0})},Z16=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of s06(Z))if(!e06.call($,Y)&&Y!==G)Bl0($,Y,{get:()=>Z[Y],enumerable:!(X=a06(Z,Y))||X.enumerable})}return $},G16=($)=>Z16(Bl0({},"__esModule",{value:!0}),$),O1$={};$16(O1$,{refreshToken:()=>X16});D1$.exports=G16(O1$);var B1$=Gn(),NN=Qn();async function X16($){let Z=$?.project,G=$?.team;if(!Z&&!G){let Y=(0,NN.findProjectInfo)();Z=Y.projectId,G=Y.teamId}else if(!Z||!G){let Y=(0,NN.findProjectInfo)();Z=Z??Y.projectId,G=G??Y.teamId}if(!Z)throw new B1$.VercelOidcTokenError("Failed to refresh OIDC token: No project specified. Try re-linking your project with `vc link`");let X=(0,NN.loadToken)(Z);if(!X||(0,NN.isExpired)((0,NN.getTokenPayload)(X.token),$?.expirationBufferMs)){let Y=await(0,NN.getVercelToken)({expirationBufferMs:$?.expirationBufferMs});if(X=await(0,NN.getVercelOidcToken)(Y,Z,G),!X)throw new B1$.VercelOidcTokenError("Failed to refresh OIDC token");(0,NN.saveToken)(X,Z)}process.env.VERCEL_OIDC_TOKEN=X.token;return}});var j1$=_((ew5,z1$)=>{var{defineProperty:Dl0,getOwnPropertyDescriptor:Y16,getOwnPropertyNames:Q16}=Object,J16=Object.prototype.hasOwnProperty,W16=($,Z)=>{for(var G in Z)Dl0($,G,{get:Z[G],enumerable:!0})},K16=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of Q16(Z))if(!J16.call($,Y)&&Y!==G)Dl0($,Y,{get:()=>Z[Y],enumerable:!(X=Y16(Z,Y))||X.enumerable})}return $},w16=($)=>K16(Dl0({},"__esModule",{value:!0}),$),L1$={};W16(L1$,{getVercelOidcToken:()=>H16,getVercelOidcTokenSync:()=>Ol0});z1$.exports=w16(L1$);var U16=Yl0(),F16=Gn();async function H16($){let Z="",G;try{Z=Ol0()}catch(X){G=X}try{let[{getTokenPayload:X,isExpired:Y},{refreshToken:Q}]=await Promise.all([await Promise.resolve().then(() => k(Qn())),await Promise.resolve().then(() => k(E1$()))]);if(!Z||Y(X(Z),$?.expirationBufferMs))await Q($),Z=Ol0()}catch(X){let Y=G instanceof Error?G.message:"";if(X instanceof Error)Y=`${Y}
 ${X.message}`;if(Y)throw new F16.VercelOidcTokenError(Y);throw X}return Z}function Ol0(){let $=(0,U16.getContext)().headers?.["x-vercel-oidc-token"]??process.env.VERCEL_OIDC_TOKEN;if(!$)throw Error("The 'x-vercel-oidc-token' header is missing from the request. Do you have the OIDC option enabled in the Vercel project settings?");return $}});var Ll0=_(($U5,I1$)=>{var{defineProperty:El0,getOwnPropertyDescriptor:N16,getOwnPropertyNames:B16}=Object,O16=Object.prototype.hasOwnProperty,D16=($,Z)=>{for(var G in Z)El0($,G,{get:Z[G],enumerable:!0})},E16=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of B16(Z))if(!O16.call($,Y)&&Y!==G)El0($,Y,{get:()=>Z[Y],enumerable:!(X=N16(Z,Y))||X.enumerable})}return $},L16=($)=>E16(El0({},"__esModule",{value:!0}),$),T1$={};D16(T1$,{AccessTokenMissingError:()=>A1$.AccessTokenMissingError,RefreshAccessTokenFailedError:()=>A1$.RefreshAccessTokenFailedError,getContext:()=>z16.getContext,getVercelOidcToken:()=>P1$.getVercelOidcToken,getVercelOidcTokenSync:()=>P1$.getVercelOidcTokenSync,getVercelToken:()=>j16.getVercelToken});I1$.exports=L16(T1$);var P1$=j1$(),z16=Yl0(),A1$=Hl0(),j16=Qn()});import{z as rw}from"zod/v4";import{z as v1$}from"zod/v4";import{z as jl0}from"zod/v4";import{z as z9}from"zod/v4";import{z as QZ}from"zod/v4";import{z as L9}from"zod/v4";import{z as c50}from"zod/v4";import{z as U5}from"zod/v4";import{z as u4}from"zod/v4";import{z as p8}from"zod/v4";import{z as I5}from"zod/v4";import{z as X4}from"zod";import{z as s6}from"zod";async function e1$({response:$,statusCode:Z,defaultMessage:G="Gateway request failed",cause:X,authMethod:Y}){var Q;let J=await o5({value:$,schema:y16});if(!J.success){let F=typeof $==="object"&&$!==null&&"generationId"in $?$.generationId:void 0;return new v16({message:`Invalid error response format: ${G}`,statusCode:Z,response:$,validationError:J.error,cause:X,generationId:F})}let W=J.value,K=W.error.type,w=W.error.message,U=(Q=W.generationId)!=null?Q:void 0;switch(K){case"authentication_error":return u50.createContextualError({apiKeyProvided:Y==="api-key",oidcTokenProvided:Y==="oidc",statusCode:Z,cause:X,generationId:U});case"invalid_request_error":return new I16({message:w,statusCode:Z,cause:X,generationId:U});case"rate_limit_exceeded":return new q16({message:w,statusCode:Z,cause:X,generationId:U});case"model_not_found":{let F=await o5({value:W.error.param,schema:k16});return new S16({message:w,statusCode:Z,modelId:F.success?F.value.modelId:void 0,cause:X,generationId:U})}case"internal_server_error":return new l1$({message:w,statusCode:Z,cause:X,generationId:U});case"failed_dependency":return new _16({message:w,statusCode:Z,cause:X,generationId:U});case"forbidden":return new f16({message:w,statusCode:Z,cause:X,generationId:U});default:return new l1$({message:w,statusCode:Z,cause:X,generationId:U})}}function g16($){if($.data!==void 0)return $.data;if($.responseBody!=null)try{return JSON.parse($.responseBody)}catch(Z){return $.responseBody}return{}}function Y$$($){if(!($ instanceof Error))return!1;let Z=$.code;if(typeof Z==="string")return["UND_ERR_HEADERS_TIMEOUT","UND_ERR_BODY_TIMEOUT","UND_ERR_CONNECT_TIMEOUT"].includes(Z);return!1}async function AX($,Z){var G;if(j9.isInstance($))return $;if(Y$$($))return X$$.createTimeoutError({originalMessage:$ instanceof Error?$.message:"Unknown error",cause:$});if(J8.isInstance($)){if($.cause&&Y$$($.cause))return X$$.createTimeoutError({originalMessage:$.message,cause:$});return await e1$({response:g16($),statusCode:(G=$.statusCode)!=null?G:500,defaultMessage:"Gateway request failed",cause:$,authMethod:Z})}return await e1$({response:{},statusCode:500,defaultMessage:$ instanceof Error?`Gateway request failed: ${$.message}`:"Unknown Gateway error",cause:$,authMethod:Z})}async function yW($){let Z=await o5({value:$[D$$],schema:c16});return Z.success?Z.value:void 0}function J$$($){if($.type==="file"&&$.data instanceof Uint8Array)return{...$,data:HX($.data)};return $}function Y$6($){if($.type==="file"&&$.data instanceof Uint8Array)return{...$,data:HX($.data)};return $}async function P$6(){var $;return($=E$$.getContext().headers)==null?void 0:$["x-vercel-id"]}function Pl0($={}){var Z,G;let X=null,Y=null,Q=(Z=$.metadataCacheRefreshMillis)!=null?Z:300000,J=0,W=(G=dH($.baseURL))!=null?G:"https://ai-gateway.vercel.sh/v3/ai",K=async()=>{try{let z=await I$6($);return a6({Authorization:`Bearer ${z.token}`,"ai-gateway-protocol-version":T$6,[D$$]:z.authMethod,...$.headers},`ai-sdk/gateway/${A$6}`)}catch(z){throw u50.createContextualError({apiKeyProvided:!1,oidcTokenProvided:!1,statusCode:401,cause:z})}},w=()=>{let z=zW({settingValue:void 0,environmentVariableName:"VERCEL_DEPLOYMENT_ID"}),j=zW({settingValue:void 0,environmentVariableName:"VERCEL_ENV"}),P=zW({settingValue:void 0,environmentVariableName:"VERCEL_REGION"}),A=zW({settingValue:void 0,environmentVariableName:"VERCEL_PROJECT_ID"});return async()=>{let M=await P$6();return{...z&&{"ai-o11y-deployment-id":z},...j&&{"ai-o11y-environment":j},...P&&{"ai-o11y-region":P},...M&&{"ai-o11y-request-id":M},...A&&{"ai-o11y-project-id":A}}}},U=(z)=>{return new t16(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:w()})},F=async()=>{var z,j,P;let A=(P=(j=(z=$._internal)==null?void 0:z.currentDate)==null?void 0:j.call(z).getTime())!=null?P:Date.now();if(!X||A-J>Q)J=A,X=new Q$$({baseURL:W,headers:K,fetch:$.fetch}).getAvailableModels().then((M)=>{return Y=M,M}).catch(async(M)=>{throw await AX(M,await yW(await K()))});return Y?Promise.resolve(Y):X},H=async()=>{return new Q$$({baseURL:W,headers:K,fetch:$.fetch}).getCredits().catch(async(z)=>{throw await AX(z,await yW(await K()))})},N=async(z)=>{return new m16({baseURL:W,headers:K,fetch:$.fetch}).getSpendReport(z).catch(async(j)=>{throw await AX(j,await yW(await K()))})},B=async(z)=>{return new n16({baseURL:W,headers:K,fetch:$.fetch}).getGenerationInfo(z).catch(async(j)=>{throw await AX(j,await yW(await K()))})},D=function(z){if(new.target)throw Error("The Gateway Provider model function cannot be called with the new keyword.");return U(z)};D.specificationVersion="v3",D.getAvailableModels=F,D.getCredits=H,D.getSpendReport=N,D.getGenerationInfo=B,D.imageModel=(z)=>{return new s16(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:w()})},D.languageModel=U;let E=(z)=>{return new r16(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:w()})};D.embeddingModel=E,D.textEmbeddingModel=E,D.videoModel=(z)=>{return new X$6(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:w()})};let L=(z)=>{return new w$6(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:w()})};return D.rerankingModel=L,D.reranking=L,D.chat=D.languageModel,D.embedding=D.embeddingModel,D.image=D.imageModel,D.video=D.videoModel,D.tools=j$6,D}async function I$6($){let Z=zW({settingValue:$.apiKey,environmentVariableName:"AI_GATEWAY_API_KEY"});if(Z)return{token:Z,authMethod:"api-key"};return{token:await L$$.getVercelOidcToken(),authMethod:"oidc"}}var E$$,L$$,P16="vercel.ai.gateway.error",zl0,R1$,q1$,j9,W$$="GatewayAuthenticationError",A16,M1$,k1$,S1$,u50,K$$="GatewayInvalidRequestError",T16,V1$,C1$,_1$,I16,w$$="GatewayRateLimitError",R16,b1$,f1$,x1$,q16,U$$="GatewayModelNotFoundError",M16,y1$,k16,g1$,h1$,S16,F$$="GatewayInternalServerError",V16,c1$,u1$,d1$,l1$,H$$="GatewayFailedDependencyError",C16,m1$,i1$,n1$,_16,N$$="GatewayForbiddenError",b16,p1$,t1$,r1$,f16,B$$="GatewayResponseError",x16,o1$,a1$,s1$,v16,y16,O$$="GatewayTimeoutError",h16,$$$,Z$$,G$$,X$$,D$$="ai-gateway-auth-method",c16,u16,Q$$=class{constructor($){this.config=$}async getAvailableModels(){try{let{value:$}=await OY({url:`${this.config.baseURL}/config`,headers:await v$(this.config.headers()),successfulResponseHandler:G8(d16),failedResponseHandler:A5({errorSchema:z9.any(),errorToMessage:(Z)=>Z}),fetch:this.config.fetch});return $}catch($){throw await AX($)}}async getCredits(){try{let $=new URL(this.config.baseURL),{value:Z}=await OY({url:`${$.origin}/v1/credits`,headers:await v$(this.config.headers()),successfulResponseHandler:G8(l16),failedResponseHandler:A5({errorSchema:z9.any(),errorToMessage:(G)=>G}),fetch:this.config.fetch});return Z}catch($){throw await AX($)}}},d16,l16,m16=class{constructor($){this.config=$}async getSpendReport($){try{let Z=new URL(this.config.baseURL),G=new URLSearchParams;if(G.set("start_date",$.startDate),G.set("end_date",$.endDate),$.groupBy)G.set("group_by",$.groupBy);if($.datePart)G.set("date_part",$.datePart);if($.userId)G.set("user_id",$.userId);if($.model)G.set("model",$.model);if($.provider)G.set("provider",$.provider);if($.credentialType)G.set("credential_type",$.credentialType);if($.tags&&$.tags.length>0)G.set("tags",$.tags.join(","));let{value:X}=await OY({url:`${Z.origin}/v1/report?${G.toString()}`,headers:await v$(this.config.headers()),successfulResponseHandler:G8(i16),failedResponseHandler:A5({errorSchema:QZ.any(),errorToMessage:(Y)=>Y}),fetch:this.config.fetch});return X}catch(Z){throw await AX(Z)}}},i16,n16=class{constructor($){this.config=$}async getGenerationInfo($){try{let Z=new URL(this.config.baseURL),{value:G}=await OY({url:`${Z.origin}/v1/generation?id=${encodeURIComponent($.id)}`,headers:await v$(this.config.headers()),successfulResponseHandler:G8(p16),failedResponseHandler:A5({errorSchema:L9.any(),errorToMessage:(X)=>X}),fetch:this.config.fetch});return G}catch(Z){throw await AX(Z)}}},p16,t16=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3",this.supportedUrls={"*/*":[/.*/]}}get provider(){return this.config.provider}async getArgs($){let{abortSignal:Z,...G}=$;return{args:this.maybeEncodeFileParts(G),warnings:[]}}async doGenerate($){let{args:Z,warnings:G}=await this.getArgs($),{abortSignal:X}=$,Y=await v$(this.config.headers());try{let{responseHeaders:Q,value:J,rawValue:W}=await N8({url:this.getUrl(),headers:r$(Y,$.headers,this.getModelConfigHeaders(this.modelId,!1),await v$(this.config.o11yHeaders)),body:Z,successfulResponseHandler:G8(c50.any()),failedResponseHandler:A5({errorSchema:c50.any(),errorToMessage:(K)=>K}),...X&&{abortSignal:X},fetch:this.config.fetch});return{...J,request:{body:Z},response:{headers:Q,body:W},warnings:G}}catch(Q){throw await AX(Q,await yW(Y))}}async doStream($){let{args:Z,warnings:G}=await this.getArgs($),{abortSignal:X}=$,Y=await v$(this.config.headers());try{let{value:Q,responseHeaders:J}=await N8({url:this.getUrl(),headers:r$(Y,$.headers,this.getModelConfigHeaders(this.modelId,!0),await v$(this.config.o11yHeaders)),body:Z,successfulResponseHandler:y7(c50.any()),failedResponseHandler:A5({errorSchema:c50.any(),errorToMessage:(W)=>W}),...X&&{abortSignal:X},fetch:this.config.fetch});return{stream:Q.pipeThrough(new TransformStream({start(W){if(G.length>0)W.enqueue({type:"stream-start",warnings:G})},transform(W,K){if(W.success){let w=W.value;if(w.type==="raw"&&!$.includeRawChunks)return;if(w.type==="response-metadata"&&w.timestamp&&typeof w.timestamp==="string")w.timestamp=new Date(w.timestamp);K.enqueue(w)}else K.error(W.error)}})),request:{body:Z},response:{headers:J}}}catch(Q){throw await AX(Q,await yW(Y))}}isFilePart($){return $&&typeof $==="object"&&"type"in $&&$.type==="file"}maybeEncodeFileParts($){for(let Z of $.prompt)for(let G of Z.content)if(this.isFilePart(G)){let X=G;if(X.data instanceof Uint8Array){let Y=Uint8Array.from(X.data),Q=Buffer.from(Y).toString("base64");X.data=new URL(`data:${X.mediaType||"application/octet-stream"};base64,${Q}`)}}return $}getUrl(){return`${this.config.baseURL}/language-model`}getModelConfigHeaders($,Z){return{"ai-language-model-specification-version":"3","ai-language-model-id":$,"ai-language-model-streaming":String(Z)}}},r16=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3",this.maxEmbeddingsPerCall=2048,this.supportsParallelCalls=!0}get provider(){return this.config.provider}async doEmbed({values:$,headers:Z,abortSignal:G,providerOptions:X}){var Y,Q;let J=await v$(this.config.headers());try{let{responseHeaders:W,value:K,rawValue:w}=await N8({url:this.getUrl(),headers:r$(J,Z!=null?Z:{},this.getModelConfigHeaders(),await v$(this.config.o11yHeaders)),body:{values:$,...X?{providerOptions:X}:{}},successfulResponseHandler:G8(a16),failedResponseHandler:A5({errorSchema:U5.any(),errorToMessage:(U)=>U}),...G&&{abortSignal:G},fetch:this.config.fetch});return{embeddings:K.embeddings,usage:(Y=K.usage)!=null?Y:void 0,providerMetadata:K.providerMetadata,response:{headers:W,body:w},warnings:(Q=K.warnings)!=null?Q:[]}}catch(W){throw await AX(W,await yW(J))}}getUrl(){return`${this.config.baseURL}/embedding-model`}getModelConfigHeaders(){return{"ai-embedding-model-specification-version":"3","ai-model-id":this.modelId}}},o16,a16,s16=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3",this.maxImagesPerCall=Number.MAX_SAFE_INTEGER}get provider(){return this.config.provider}async doGenerate({prompt:$,n:Z,size:G,aspectRatio:X,seed:Y,files:Q,mask:J,providerOptions:W,headers:K,abortSignal:w}){var U,F,H,N;let B=await v$(this.config.headers());try{let{responseHeaders:D,value:E,rawValue:L}=await N8({url:this.getUrl(),headers:r$(B,K!=null?K:{},this.getModelConfigHeaders(),await v$(this.config.o11yHeaders)),body:{prompt:$,n:Z,...G&&{size:G},...X&&{aspectRatio:X},...Y&&{seed:Y},...W&&{providerOptions:W},...Q&&{files:Q.map((z)=>J$$(z))},...J&&{mask:J$$(J)}},successfulResponseHandler:G8(G$6),failedResponseHandler:A5({errorSchema:u4.any(),errorToMessage:(z)=>z}),...w&&{abortSignal:w},fetch:this.config.fetch});return{images:E.images,warnings:(U=E.warnings)!=null?U:[],providerMetadata:E.providerMetadata,response:{timestamp:new Date,modelId:this.modelId,headers:D},...E.usage!=null&&{usage:{inputTokens:(F=E.usage.inputTokens)!=null?F:void 0,outputTokens:(H=E.usage.outputTokens)!=null?H:void 0,totalTokens:(N=E.usage.totalTokens)!=null?N:void 0}}}}catch(D){throw await AX(D,await yW(B))}}getUrl(){return`${this.config.baseURL}/image-model`}getModelConfigHeaders(){return{"ai-image-model-specification-version":"3","ai-model-id":this.modelId}}},e16,$$6,Z$6,G$6,X$6=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3",this.maxVideosPerCall=Number.MAX_SAFE_INTEGER}get provider(){return this.config.provider}async doGenerate({prompt:$,n:Z,aspectRatio:G,resolution:X,duration:Y,fps:Q,seed:J,image:W,providerOptions:K,headers:w,abortSignal:U}){var F;let H=await v$(this.config.headers());try{let{responseHeaders:N,value:B}=await N8({url:this.getUrl(),headers:r$(H,w!=null?w:{},this.getModelConfigHeaders(),await v$(this.config.o11yHeaders),{accept:"text/event-stream"}),body:{prompt:$,n:Z,...G&&{aspectRatio:G},...X&&{resolution:X},...Y&&{duration:Y},...Q&&{fps:Q},...J&&{seed:J},...K&&{providerOptions:K},...W&&{image:Y$6(W)}},successfulResponseHandler:async({response:D,url:E,requestBodyValues:L})=>{if(D.body==null)throw new J8({message:"SSE response body is empty",url:E,requestBodyValues:L,statusCode:D.status});let j=fw({stream:D.body,schema:K$6}).getReader(),{done:P,value:A}=await j.read();if(j.releaseLock(),P||!A)throw new J8({message:"SSE stream ended without a data event",url:E,requestBodyValues:L,statusCode:D.status});if(!A.success)throw new J8({message:"Failed to parse video SSE event",cause:A.error,url:E,requestBodyValues:L,statusCode:D.status});let M=A.value;if(M.type==="error")throw new J8({message:M.message,statusCode:M.statusCode,url:E,requestBodyValues:L,responseHeaders:Object.fromEntries([...D.headers]),responseBody:JSON.stringify(M),data:{error:{message:M.message,type:M.errorType,param:M.param}}});return{value:{videos:M.videos,warnings:M.warnings,providerMetadata:M.providerMetadata},responseHeaders:Object.fromEntries([...D.headers])}},failedResponseHandler:A5({errorSchema:p8.any(),errorToMessage:(D)=>D}),...U&&{abortSignal:U},fetch:this.config.fetch});return{videos:B.videos,warnings:(F=B.warnings)!=null?F:[],providerMetadata:B.providerMetadata,response:{timestamp:new Date,modelId:this.modelId,headers:N}}}catch(N){throw await AX(N,await yW(H))}}getUrl(){return`${this.config.baseURL}/video-model`}getModelConfigHeaders(){return{"ai-video-model-specification-version":"3","ai-model-id":this.modelId}}},Q$6,J$6,W$6,K$6,w$6=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3"}get provider(){return this.config.provider}async doRerank({documents:$,query:Z,topN:G,headers:X,abortSignal:Y,providerOptions:Q}){var J;let W=await v$(this.config.headers());try{let{responseHeaders:K,value:w,rawValue:U}=await N8({url:this.getUrl(),headers:r$(W,X!=null?X:{},this.getModelConfigHeaders(),await v$(this.config.o11yHeaders)),body:{documents:$,query:Z,...G!=null?{topN:G}:{},...Q?{providerOptions:Q}:{}},successfulResponseHandler:G8(F$6),failedResponseHandler:A5({errorSchema:I5.any(),errorToMessage:(F)=>F}),...Y&&{abortSignal:Y},fetch:this.config.fetch});return{ranking:w.ranking,providerMetadata:w.providerMetadata,response:{headers:K,body:U},warnings:(J=w.warnings)!=null?J:[]}}catch(K){throw await AX(K,await yW(W))}}getUrl(){return`${this.config.baseURL}/reranking-model`}getModelConfigHeaders(){return{"ai-reranking-model-specification-version":"3","ai-model-id":this.modelId}}},U$6,F$6,H$6,N$6,B$6,O$6=($={})=>B$6($),D$6,E$6,L$6,z$6=($={})=>L$6($),j$6,A$6="3.0.133",T$6="0.0.1",d50;var Wn=O(()=>{$1();n1();$1();$1();$1();$1();$1();$1();$1();$1();$1();n1();$1();$1();$1();$1();E$$=k(Ll0(),1),L$$=k(Ll0(),1),zl0=Symbol.for(P16),j9=class $ extends(q1$=Error,R1$=zl0,q1$){constructor({message:Z,statusCode:G=500,cause:X,generationId:Y,isRetryable:Q=G!=null&&(G===408||G===409||G===429||G>=500)}){super(Y?`${Z} [${Y}]`:Z);this[R1$]=!0,this.statusCode=G,this.cause=X,this.generationId=Y,this.isRetryable=Q}static isInstance(Z){return $.hasMarker(Z)}static hasMarker(Z){return typeof Z==="object"&&Z!==null&&zl0 in Z&&Z[zl0]===!0}},A16=`vercel.ai.gateway.error.${W$$}`,M1$=Symbol.for(A16),u50=class $ extends(S1$=j9,k1$=M1$,S1$){constructor({message:Z="Authentication failed",statusCode:G=401,cause:X,generationId:Y}={}){super({message:Z,statusCode:G,cause:X,generationId:Y});this[k1$]=!0,this.name=W$$,this.type="authentication_error"}static isInstance(Z){return j9.hasMarker(Z)&&M1$ in Z}static createContextualError({apiKeyProvided:Z,oidcTokenProvided:G,message:X="Authentication failed",statusCode:Y=401,cause:Q,generationId:J}){let W;if(Z)W=`AI Gateway authentication failed: Invalid API key.
 
 Create a new API key: https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai%2Fapi-keys
@@ -2722,7 +2722,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var i$1,zC,y84,dV$,m$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",h84,d$,u$,Z6,uV$=24,jC,_J;var rV$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(i$1||(i$1={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,l+=64,c)r+=64}if(Y0>0){S(P0,m0,b0,V);for(j0=0;j0<Y0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,Y0){return i(h,l,null,0,c,r,Y0)}function v(h,l,c,r,Y0){var W0=new Uint8Array(32);return R(W0,r,Y0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,Y0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),w1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,Y0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)w1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(w1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,Y0,W0),P(h,l,b0,0)}function G0(h,l,c,r,Y0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,Y0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function w0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,Y0=~(c-1);for(var W0=0;W0<16;W0++)r=Y0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];w0(b0),w0(b0),w0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function U0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*c[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];w0(h),w0(h)}function Q0(h,l){N0(h,l,l)}function X0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,U0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),w1=Y0.subarray(16);return X0(Z1,Z1),N0(w1,w1,Z1),d0(h,w1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=G0,g=a;function H0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,l+=W0>>>16,c+=b0&Y0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&Y0|r<<16,h&Y0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,Y0=32-l;if(l<32)c=h.hi>>>l|h.lo<<Y0,r=h.lo>>>l|h.hi<<Y0;else if(l<64)c=h.lo>>>l|h.hi<<Y0,r=h.hi>>>l|h.lo<<Y0;return new Z(c,r)}function z6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,Y0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,Y0)}function J4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,Y0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,Y0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),z6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),Y0[7]=e0(m0,d5(W0[0]),J4(W0[0],W0[1],W0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var lG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function k8(h,l,c){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=lG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=l[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,Y0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(Y0,h[3],l[3]),N0(Y0,Y0,U),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function Z5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function q5(h,l){var c=G(),r=G(),Y0=G();X0(Y0,l[2]),N0(c,l[0],Y0),N0(r,l[1],Y0),d0(h,r),h[31]^=n0(c)<<7}function J9(h,l,c){var r,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)r=c[Y0/8|0]>>(Y0&7)&1,Z5(h,l,r),_6(l,h),_6(h,h),Z5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),J9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(l,32);k8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(Y0,r),q5(h,Y0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var S8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function V8(h,l){var c,r,Y0,W0;for(r=63;r>=32;--r){c=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=c-16*l[r]*S8[Y0-(r-32)],c=Math.floor((l[Y0]+128)/256),l[Y0]-=c*256;l[Y0]+=c,l[r]=0}c=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=c-(l[31]>>4)*S8[Y0],c=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=c*S8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;V8(h,l)}function f$(h,l,c,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];k8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];k8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),q5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];k8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return V8(h.subarray(32),S0),y0}function U8(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),U0(h[1],l),Q0(Y0,h[1]),N0(W0,Y0,w),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,Y0),N0(c,c,W0),V0(c,c),N0(c,c,Y0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function P7(h,l,c,r){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(U8(P0,r))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=r[Y0];if(k8(b0,h,c),G6(b0),J9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),q5(W0,m0),c-=64,A(l,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0+64];return c}var k$=32,n6=24,e6=32,r8=16,G5=32,C=32,d=32,u=32,I=32,t=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,b1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:k8,crypto_sign:f$,crypto_sign_keypair:x1,crypto_sign_open:P7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:G5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:Y8,gf:G,D:w,L:S8,pack25519:d0,unpack25519:U0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:V8,scalarmult:J9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==n6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(e6+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+e6]=h[W0];return G0(Y0,r,r.length,l,c),Y0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(Y0,r,r.length,l,c)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==G5)throw Error("bad p size");var c=new Uint8Array(G5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(G5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=G5,$.box=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox(h,l,Y0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox.open(h,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=P7(c,h,h.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=c[Y0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return P7(Y0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return k8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var Y0,W0=h.randomBytes(r);for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}()})(typeof Cg<"u"&&o5Z?o5Z:globalThis.nacl=globalThis.nacl||{});zC=typeof Cg<"u"&&o5Z?o5Z:globalThis.nacl,y84={fromSeed:zC.sign.keyPair.fromSeed,sign:zC.sign.detached,verify:zC.sign.detached.verify,randomBytes:zC.randomBytes,scalarBaseMultiply:zC.scalarMult.base,seal:zC.box,open:zC.box.open};h84=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));jC=[120,107,118,49];g84(y84);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function o$1($){try{$?.clear?.()}catch{}}async function oV$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=pV$($),W=t$1(J.sub),K=r$1(new TextEncoder().encode(Z)),w=lV$();try{let U=await nV$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(tV$(U,w))}finally{o$1(w),o$1(K),o$1(W)}}var aV$=O(()=>{rV$()});function o84($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function sV$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(a$1(),503);if(!Y.natsPublicUrl)return Z.json(a$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(a$1(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await oV$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:gV$(Q),userId:X,allowedConnectionTypes:o84(Y.natsPublicUrl)})}return Z.json(hV$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var a$1=()=>({error:"link session unavailable"});var eV$=O(()=>{Y6();F8();cV$();aV$()});async function e84($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function $64($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new SN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function Z64($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},a84),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function G64($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<$C$){await D8(ZC$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<$C$){await D8(ZC$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var a84=90000,s84=15000,GC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=GU({orgId:Y.id,virtualMcpId:Q,branch:J}),w=ey({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await bY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&nW(F5(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return rQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),rQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},s84);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await e84(F,w)){await $64({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await Z64({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await G64({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},$C$=60000,ZC$=500;var XC$=O(()=>{Y6();LC();kY();l5();qE0();on();PV();i90();qX()});function Y64($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function Q64($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(X64)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var X64=1e4,J64=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},YC$=()=>{let $=new V1;return $.use("*",J64),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await Q64(X,Y);return Z.json({apps:Y64(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var QC$=O(()=>{Y6();F8()});import{z as h1}from"zod";function jK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function D64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function E64($,Z,G){try{return JSON.parse($)}catch{throw new KC$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function L64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:E64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function z64($){let Z=$.map((G)=>{let X=G.function.parameters?DY(G.function.parameters):DY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function j64($){if(!$)return;return{openai:{response_format:$}}}function P64(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function JC$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function WC$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var W64=256,K64,w64,U64,F64,H64,N64,B64,O64,KC$,wC$,UC$;var FC$=O(()=>{L6();Y6();LC();K64=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),w64=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),U64=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(w64).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),F64=h1.object({type:h1.literal("text")}),H64=h1.object({type:h1.literal("json_object")}),N64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),B64=h1.union([F64,H64,N64]),O64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(U64),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(K64).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:B64.optional(),user:h1.string().optional()});KC$=class KC$ extends Error{constructor($){super($);this.name="MessageConversionError"}};wC$=new V1;wC$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(jK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(jK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(jK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=O64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(jK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=D64(Q.model);if(!J)return $.json(jK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(jK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(jK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=L64(Q.messages),H=Q.tools?z64(Q.tools):void 0,N=j64(Q.response_format),B=P64(),D=Math.floor(Date.now()/1000);if(Q.stream)return rQ($,async(E)=>{let L=JC$(U,F,H,Q,N,$.req.raw.signal);try{let z=fQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=W64)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:WC$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=JC$(U,F,H,Q,N,$.req.raw.signal),L=await EN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:WC$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(jK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(jK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(jK(Y.message,"server_error"),500)}});UC$=wC$});var NC$;var HC$=O(()=>{NC$={name:"decocms",version:"4.82.2",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function I64(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??T64}}var BC$,T64="https://ph.studio.decocms.com",OC$;var DC$=O(()=>{Y6();eb0();pN();OG();F8();Z01();HC$();BC$=new V1;BC$.get("/",($)=>{let Z={version:NC$.version,theme:zb1(),...oO().logo&&{logo:oO().logo},...gQ()&&{internalUrl:$00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:fI$(),posthog:I64(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!gQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});OC$=BC$});function hL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function LC$($){return(hL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function zC$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(hL0($))}&sz=${Z}`}function EC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function jC$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?EC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):EC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as R64}from"path";function yU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function q64($){let Z=hL0($),G=LC$(Z),X=zC$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=jC$({brand:G,domain:Z});return[`<title>${yU(J)}</title>`,`<meta name="description" content="${yU(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${yU(J)}" />`,`<meta property="og:description" content="${yU(W)}" />`,`<meta property="og:url" content="${yU(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${yU(J)}" />`,`<meta name="twitter:description" content="${yU(W)}" />`,`<link rel="canonical" href="${yU(Q)}" />`,`<link rel="icon" href="${yU(X)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var i$1,zC,y84,dV$,m$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",h84,d$,u$,Z6,uV$=24,jC,_J;var rV$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(i$1||(i$1={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,l+=64,c)r+=64}if(Y0>0){S(P0,m0,b0,V);for(j0=0;j0<Y0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,Y0){return i(h,l,null,0,c,r,Y0)}function v(h,l,c,r,Y0){var W0=new Uint8Array(32);return R(W0,r,Y0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,Y0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),w1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,Y0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)w1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(w1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,Y0,W0),P(h,l,b0,0)}function G0(h,l,c,r,Y0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,Y0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function w0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,Y0=~(c-1);for(var W0=0;W0<16;W0++)r=Y0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];w0(b0),w0(b0),w0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function U0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*c[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];w0(h),w0(h)}function Q0(h,l){N0(h,l,l)}function X0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,U0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),w1=Y0.subarray(16);return X0(Z1,Z1),N0(w1,w1,Z1),d0(h,w1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=G0,g=a;function H0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,l+=W0>>>16,c+=b0&Y0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&Y0|r<<16,h&Y0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,Y0=32-l;if(l<32)c=h.hi>>>l|h.lo<<Y0,r=h.lo>>>l|h.hi<<Y0;else if(l<64)c=h.lo>>>l|h.hi<<Y0,r=h.hi>>>l|h.lo<<Y0;return new Z(c,r)}function z6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,Y0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,Y0)}function J4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,Y0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,Y0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),z6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),Y0[7]=e0(m0,d5(W0[0]),J4(W0[0],W0[1],W0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var lG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function k8(h,l,c){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=lG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=l[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,Y0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(Y0,h[3],l[3]),N0(Y0,Y0,U),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function Z5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function q5(h,l){var c=G(),r=G(),Y0=G();X0(Y0,l[2]),N0(c,l[0],Y0),N0(r,l[1],Y0),d0(h,r),h[31]^=n0(c)<<7}function J9(h,l,c){var r,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)r=c[Y0/8|0]>>(Y0&7)&1,Z5(h,l,r),_6(l,h),_6(h,h),Z5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),J9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(l,32);k8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(Y0,r),q5(h,Y0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var S8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function V8(h,l){var c,r,Y0,W0;for(r=63;r>=32;--r){c=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=c-16*l[r]*S8[Y0-(r-32)],c=Math.floor((l[Y0]+128)/256),l[Y0]-=c*256;l[Y0]+=c,l[r]=0}c=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=c-(l[31]>>4)*S8[Y0],c=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=c*S8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;V8(h,l)}function f$(h,l,c,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];k8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];k8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),q5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];k8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return V8(h.subarray(32),S0),y0}function U8(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),U0(h[1],l),Q0(Y0,h[1]),N0(W0,Y0,w),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,Y0),N0(c,c,W0),V0(c,c),N0(c,c,Y0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function P7(h,l,c,r){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(U8(P0,r))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=r[Y0];if(k8(b0,h,c),G6(b0),J9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),q5(W0,m0),c-=64,A(l,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0+64];return c}var k$=32,n6=24,e6=32,r8=16,G5=32,C=32,d=32,u=32,I=32,t=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,b1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:k8,crypto_sign:f$,crypto_sign_keypair:x1,crypto_sign_open:P7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:G5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:Y8,gf:G,D:w,L:S8,pack25519:d0,unpack25519:U0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:V8,scalarmult:J9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==n6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(e6+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+e6]=h[W0];return G0(Y0,r,r.length,l,c),Y0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(Y0,r,r.length,l,c)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==G5)throw Error("bad p size");var c=new Uint8Array(G5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(G5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=G5,$.box=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox(h,l,Y0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox.open(h,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=P7(c,h,h.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=c[Y0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return P7(Y0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return k8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var Y0,W0=h.randomBytes(r);for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}()})(typeof Cg<"u"&&o5Z?o5Z:globalThis.nacl=globalThis.nacl||{});zC=typeof Cg<"u"&&o5Z?o5Z:globalThis.nacl,y84={fromSeed:zC.sign.keyPair.fromSeed,sign:zC.sign.detached,verify:zC.sign.detached.verify,randomBytes:zC.randomBytes,scalarBaseMultiply:zC.scalarMult.base,seal:zC.box,open:zC.box.open};h84=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));jC=[120,107,118,49];g84(y84);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function o$1($){try{$?.clear?.()}catch{}}async function oV$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=pV$($),W=t$1(J.sub),K=r$1(new TextEncoder().encode(Z)),w=lV$();try{let U=await nV$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(tV$(U,w))}finally{o$1(w),o$1(K),o$1(W)}}var aV$=O(()=>{rV$()});function o84($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function sV$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(a$1(),503);if(!Y.natsPublicUrl)return Z.json(a$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(a$1(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await oV$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:gV$(Q),userId:X,allowedConnectionTypes:o84(Y.natsPublicUrl)})}return Z.json(hV$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var a$1=()=>({error:"link session unavailable"});var eV$=O(()=>{Y6();F8();cV$();aV$()});async function e84($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function $64($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new SN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function Z64($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},a84),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function G64($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<$C$){await D8(ZC$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<$C$){await D8(ZC$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var a84=90000,s84=15000,GC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=GU({orgId:Y.id,virtualMcpId:Q,branch:J}),w=ey({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await bY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&nW(F5(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return rQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),rQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},s84);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await e84(F,w)){await $64({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await Z64({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await G64({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},$C$=60000,ZC$=500;var XC$=O(()=>{Y6();LC();kY();l5();qE0();on();PV();i90();qX()});function Y64($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function Q64($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(X64)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var X64=1e4,J64=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},YC$=()=>{let $=new V1;return $.use("*",J64),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await Q64(X,Y);return Z.json({apps:Y64(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var QC$=O(()=>{Y6();F8()});import{z as h1}from"zod";function jK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function D64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function E64($,Z,G){try{return JSON.parse($)}catch{throw new KC$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function L64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:E64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function z64($){let Z=$.map((G)=>{let X=G.function.parameters?DY(G.function.parameters):DY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function j64($){if(!$)return;return{openai:{response_format:$}}}function P64(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function JC$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function WC$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var W64=256,K64,w64,U64,F64,H64,N64,B64,O64,KC$,wC$,UC$;var FC$=O(()=>{L6();Y6();LC();K64=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),w64=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),U64=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(w64).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),F64=h1.object({type:h1.literal("text")}),H64=h1.object({type:h1.literal("json_object")}),N64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),B64=h1.union([F64,H64,N64]),O64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(U64),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(K64).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:B64.optional(),user:h1.string().optional()});KC$=class KC$ extends Error{constructor($){super($);this.name="MessageConversionError"}};wC$=new V1;wC$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(jK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(jK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(jK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=O64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(jK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=D64(Q.model);if(!J)return $.json(jK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(jK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(jK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=L64(Q.messages),H=Q.tools?z64(Q.tools):void 0,N=j64(Q.response_format),B=P64(),D=Math.floor(Date.now()/1000);if(Q.stream)return rQ($,async(E)=>{let L=JC$(U,F,H,Q,N,$.req.raw.signal);try{let z=fQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=W64)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:WC$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=JC$(U,F,H,Q,N,$.req.raw.signal),L=await EN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:WC$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(jK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(jK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(jK(Y.message,"server_error"),500)}});UC$=wC$});var NC$;var HC$=O(()=>{NC$={name:"decocms",version:"4.82.4",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function I64(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??T64}}var BC$,T64="https://ph.studio.decocms.com",OC$;var DC$=O(()=>{Y6();eb0();pN();OG();F8();Z01();HC$();BC$=new V1;BC$.get("/",($)=>{let Z={version:NC$.version,theme:zb1(),...oO().logo&&{logo:oO().logo},...gQ()&&{internalUrl:$00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:fI$(),posthog:I64(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!gQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});OC$=BC$});function hL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function LC$($){return(hL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function zC$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(hL0($))}&sz=${Z}`}function EC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function jC$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?EC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):EC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as R64}from"path";function yU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function q64($){let Z=hL0($),G=LC$(Z),X=zC$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=jC$({brand:G,domain:Z});return[`<title>${yU(J)}</title>`,`<meta name="description" content="${yU(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${yU(J)}" />`,`<meta property="og:description" content="${yU(W)}" />`,`<meta property="og:url" content="${yU(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${yU(J)}" />`,`<meta name="twitter:description" content="${yU(W)}" />`,`<link rel="canonical" href="${yU(Q)}" />`,`<link rel="icon" href="${yU(X)}" sizes="any" />`].join(`
     `)}function M64($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function PC$($){let Z=new V1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?R64($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=q64(X);return G.html(M64(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var AC$=O(()=>{Y6();F8()});import{z as Q1}from"zod";var AC,k64,S64,V64,C64,TC$;var IC$=O(()=>{AC=Q1.enum(["good","bad","neutral"]),k64=Q1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},Q1.object({kind:Q1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:Q1.coerce.string().optional(),tone:AC.optional(),muted:Q1.boolean().optional(),delta:Q1.coerce.string().optional(),deltaDir:Q1.enum(["up","down","neutral"]).optional(),points:Q1.array(Q1.coerce.number()).optional(),label:Q1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),S64=Q1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},Q1.array(k64)),V64={key:Q1.coerce.string(),title:Q1.coerce.string(),eyebrow:Q1.coerce.string().optional(),headline:Q1.coerce.string(),annotation:Q1.coerce.string().optional(),methodology:Q1.coerce.string().optional(),sources:Q1.array(Q1.object({name:Q1.coerce.string(),logoUrl:Q1.coerce.string()})).optional()},C64=Q1.discriminatedUnion("template",[Q1.object({template:Q1.literal("cover"),score:Q1.object({value:Q1.coerce.number(),max:Q1.coerce.number().optional(),grade:Q1.coerce.string().optional(),label:Q1.coerce.string().optional()}).optional(),brandImage:Q1.coerce.string().optional(),screenshot:Q1.coerce.string().optional(),mobileScreenshot:Q1.coerce.string().optional()}),Q1.object({template:Q1.literal("cta"),ctaUrl:Q1.coerce.string().optional(),ctaLabel:Q1.coerce.string().optional(),bullets:Q1.array(Q1.coerce.string()).optional()}),Q1.object({template:Q1.literal("series"),points:Q1.array(Q1.coerce.number()).min(2),xLabels:Q1.array(Q1.coerce.string()).min(1),unit:Q1.coerce.string().optional(),callout:Q1.object({index:Q1.coerce.number(),value:Q1.coerce.string(),tone:AC.optional()})}),Q1.object({template:Q1.literal("threshold"),value:Q1.coerce.string().default(""),metricLabel:Q1.coerce.string().optional(),ratio:Q1.coerce.number(),thresholdRatio:Q1.coerce.number().optional(),thresholdLabel:Q1.coerce.string().default(""),tone:AC.optional()}),Q1.object({template:Q1.literal("stats"),stats:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),tone:AC.optional()})).min(1)}),Q1.object({template:Q1.literal("bars"),items:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),ratio:Q1.coerce.number(),tone:AC.optional()})).min(1)}),Q1.object({template:Q1.literal("gauges"),gauges:Q1.array(Q1.object({label:Q1.coerce.string(),value:Q1.coerce.string(),status:Q1.enum(["good","warn","bad"]).catch("warn"),caption:Q1.coerce.string().optional(),ratio:Q1.coerce.number().optional()})).min(1)}),Q1.object({template:Q1.literal("checklist"),checks:Q1.array(Q1.object({label:Q1.coerce.string(),status:Q1.enum(["pass","fail","warn"]).catch("fail"),value:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("table"),columns:Q1.array(Q1.object({label:Q1.coerce.string(),align:Q1.enum(["left","right"]).optional()})).min(1),rows:Q1.array(S64).min(1),highlightRow:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("products"),products:Q1.array(Q1.object({name:Q1.coerce.string(),price:Q1.coerce.string().optional(),image:Q1.coerce.string().optional(),url:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("list"),entries:Q1.array(Q1.object({label:Q1.coerce.string(),severity:Q1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("keywords"),volumeLabel:Q1.coerce.string().optional(),keywords:Q1.array(Q1.object({term:Q1.coerce.string(),volume:Q1.coerce.string(),position:Q1.coerce.number().catch(0)})).min(1)}),Q1.object({template:Q1.literal("competitor"),metricLabel:Q1.coerce.string().optional(),competitors:Q1.array(Q1.object({name:Q1.coerce.string(),value:Q1.coerce.string(),tone:AC.optional(),isYou:Q1.boolean().optional()})).min(1)}),Q1.object({template:Q1.literal("scorecard"),rivalLabel:Q1.coerce.string().optional(),dimensions:Q1.array(Q1.object({label:Q1.coerce.string(),you:Q1.coerce.string(),rival:Q1.coerce.string().optional(),rivalName:Q1.coerce.string().optional(),tone:AC.optional()})).min(1)})]),TC$=Q1.object({...V64,template:C64})});function RC$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=TC$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var qC$=O(()=>{IC$()});function Kr($,Z){return fetch(`${UD({})}${$}`,Z)}async function _64($,Z){let G=await Kr(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=RC$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var b64,TC,MC$;var kC$=O(()=>{Y6();CQ();Wf();qC$();b64=new Set(["complete","errored","terminated","unknown"]),TC=new V1;TC.use("*",async($,Z)=>{let G=await O8.api.getSession({headers:$.req.raw.headers});if(!G?.user?.id)return $.json({error:"Authentication required"},401,{"Cache-Control":"private, no-store",Vary:"Cookie"});$.set("reportUser",{email:G.user.email}),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});TC.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await _64(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});TC.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=$.get("reportUser").email,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await Kr("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${FD({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});TC.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await Kr(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${FD({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:b64.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});TC.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await Kr(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});TC.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await Kr(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});MC$=TC});function SC$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var VC$,f64,x64,CC$;var _C$=O(()=>{Y6();x3();ev();fb();VC$=new V1,f64=["range","if-none-match","if-modified-since"],x64=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];VC$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Ug($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new P$(401,{message:"Authentication required"})}if(!G)throw new P$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new P$(400,{message:"Missing file key"});let Y=await Qp(X,Z);if(!Y)throw new P$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&f3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new P$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return SC$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of f64){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new P$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new P$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of x64){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),SC$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});CC$=VC$});var wr=_((IC)=>{var v64=IC&&IC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),y64=IC&&IC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))v64(Z,$,G)};Object.defineProperty(IC,"__esModule",{value:!0});y64(rX(),IC)});var xC$=_((bC$)=>{Object.defineProperty(bC$,"__esModule",{value:!0});bC$.version=void 0;bC$.version="3.4.0"});var gC$=_((PK)=>{var g64=PK&&PK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(PK,"__esModule",{value:!0});PK.NodeTransport=PK.VERSION=void 0;PK.nodeResolveHost=m64;var n4=wr(),h64=c0("net"),s$1=c0("tls"),c64=c0("path"),vC$=c0("fs"),u64=g64(c0("dns")),d64=xC$();PK.VERSION=d64.version;var l64="nats.js";class yC${socket;version;lang;yields=[];signal=(0,n4.deferred)();closedNotification=(0,n4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=l64,this.version=PK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,n4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw n4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new n4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new n4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,n4.deferred)(),G,X=(0,h64.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,n4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=n4.DataBuffer.concat(...this.yields),Y=(0,n4.extractProtocolMessage)(X);if(Y!=="")try{let Q=n4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,n4.deferred)();try{if($=(0,c64.resolve)($),!(0,vC$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,vC$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,n4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new n4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,n4.deferred)();try{let Y=(0,s$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new n4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,n4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new n4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,n4.deferred)();try{let X=(0,s$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new n4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,n4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,n4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof s$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,n4.render)($)}`);let Z=(0,n4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,n4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,n4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}PK.NodeTransport=yC$;function m64($){let Z=(0,n4.deferred)();return u64.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var lC$=_((dC$)=>{Object.defineProperty(dC$,"__esModule",{value:!0});dC$.connect=i64;var hC$=gC$(),cC$=wr(),uC$=wr();function i64($={}){if((0,uC$.hasWsProtocol)($))return Promise.reject(uC$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,cC$.setTransportFactory)({factory:()=>{return new hC$.NodeTransport},dnsResolveFn:hC$.nodeResolveHost}),cC$.NatsConnectionImpl.connect($)}});var mC$=_((gU)=>{var p64=gU&&gU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),t64=gU&&gU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))p64(Z,$,G)};Object.defineProperty(gU,"__esModule",{value:!0});gU.connect=void 0;var r64=lC$();Object.defineProperty(gU,"connect",{enumerable:!0,get:function(){return r64.connect}});t64(wr(),gU)});function tC$($){let Z=$?.connectFn??e64,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:s64,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=mX(a64,o64,B-1,2,0.5);await D8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?iC$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=pC$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function e64($){return nC$.connect($)}var iC$,nC$,pC$,o64=100,a64=3000,s64=3000;var rC$=O(()=>{l5();iC$=k(Qh(),1),nC$=k(mC$(),1),pC$=k(uB(),1)});function _g($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function e$1($,Z){return`${$}.${Z}`}class $81{cache;constructor($){this.cache=_g({ttlMs:$?.ttlMs??$44,maxSize:$?.maxSize??Z44})}async get($,Z){return this.cache.get(e$1($,Z))??null}async set($,Z,G){this.cache.set(e$1($,Z),G)}async invalidate($,Z){this.cache.delete(e$1($,Z))}teardown(){this.cache.clear()}}var $44=600000,Z44=5000;var oC$=()=>{};function cL0($,Z){return`${$}:${Z}`}function Z81($){let Z=_g({ttlMs:$?.ttlMs??G44,maxSize:$?.maxSize??X44}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(aC$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(cL0(K,w))},set(K,w,U){Z.set(cL0(K,w),U)},invalidate(K,w){Z.delete(cL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(aC$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(cL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var aC$="studio.ai-provider-keys.invalidate",G44=30000,X44=5000;var sC$=()=>{};class G81{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var eC$=($)=>{let Z;return()=>Z??=$()},X81,Y81;var $_$=O(()=>{B5();X81=eC$(()=>E8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),Y81=eC$(()=>E8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function U44(){return{name:aw,subjects:[`${Ym0}.>`],storage:bJ.StorageType.File,max_age:J44,max_bytes:K44,max_msgs_per_subject:w44,discard:bJ.DiscardPolicy.Old,retention:bJ.RetentionPolicy.Limits,duplicate_window:W44,num_replicas:1}}class X_${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function Z_$($){let Z=G_$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function B44($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,Q44().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class Q81{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await bJ.jetstreamManager($),G=U44();try{await Z.streams.info(aw),await Z.streams.update(aw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(aw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=B44(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=U4$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=Jm0(w,{runId:Z}),H=performance.now()-U;if(X81().record(H),Y81().add(1,{"org.id":X??"unknown"}),N44?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?Z_$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),H44)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Jm0(Z,{runId:$,dedup:G});if(X81().record(performance.now()-Y),Y81().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:Z_$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=w4$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?bJ.DeliverPolicy.New:bJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=zN($),W;try{W=await(await X.consumers.get(aw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=U90({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(W90()).pipeThrough(K90()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(aw,{filter:zN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var bJ,G_$,Y44=($)=>{let Z;return()=>Z??=$()},Q44,J44=86400000000000,W44=120000000000,K44=4294967296,w44=500000,F44,H44,N44;var Y_$=O(()=>{Km0();F90();Wm0();B5();$_$();bJ=k(uB(),1),G_$=k(Qh(),1),Q44=Y44(()=>E8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));F44=process.env.STREAM_ENCODE_TRACE==="1",H44=process.env.DECOPILOT_STREAM_TRACE==="1";N44=F44?new X_$:null});import{z as X8}from"zod";var Q_$,J_$,AK,J81,W_$,K_$,w_$,U_$,O44,F_$,H_$,N_$,B_$,O_$,D44,D_$,AZZ,E44,L44=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},E_$=($)=>{return new TextEncoder().encode(JSON.stringify($))},L_$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?E44[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${L44(Y.error)}`);return Y.data};var z_$=O(()=>{Q_$=X8.string().regex(/^[A-Za-z0-9_-]*$/u),J_$=X8.array(X8.tuple([X8.string(),X8.string()])),AK=X8.string().regex(/^[A-Za-z0-9_-]+$/u),J81=X8.string().min(1),W_$=X8.object({type:X8.literal("request.start"),protocol:X8.literal("tunnel.v1"),requestId:AK,method:X8.string().min(1),url:X8.string().min(1),headers:J_$,replySubject:J81,bodySubject:J81.optional(),abortSubject:J81,deadlineUnixMs:X8.number().int().nonnegative().optional()}),K_$=X8.object({type:X8.literal("request.chunk"),requestId:AK,seq:X8.number().int().nonnegative(),data:Q_$}),w_$=X8.object({type:X8.literal("request.end"),requestId:AK,seq:X8.number().int().nonnegative()}),U_$=X8.object({type:X8.literal("request.error"),requestId:AK,code:X8.string().min(1),message:X8.string()}),O44=X8.union([K_$,w_$,U_$]),F_$=X8.object({type:X8.literal("response.ack"),requestId:AK}),H_$=X8.object({type:X8.literal("response.start"),requestId:AK,status:X8.number().int().min(100).max(599),statusText:X8.string().optional(),headers:J_$}),N_$=X8.object({type:X8.literal("response.chunk"),requestId:AK,seq:X8.number().int().nonnegative(),data:Q_$}),B_$=X8.object({type:X8.literal("response.end"),requestId:AK,seq:X8.number().int().nonnegative()}),O_$=X8.object({type:X8.literal("response.error"),requestId:AK,code:X8.string().min(1),message:X8.string()}),D44=X8.union([F_$,H_$,N_$,B_$,O_$]),D_$=X8.object({type:X8.literal("abort"),requestId:AK,reason:X8.string().optional()}),AZZ=X8.union([W_$,O44,D44,D_$]),E44={"request.start":W_$,"request.chunk":K_$,"request.end":w_$,"request.error":U_$,"response.ack":F_$,"response.start":H_$,"response.chunk":N_$,"response.end":B_$,"response.error":O_$,abort:D_$}});var z44=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},j44=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},P44=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},A44=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},j_$=($)=>{return z44(btoa(P44($)))},P_$=($)=>{return A44(atob(j44($)))},T44;var A_$=O(()=>{T44=class T44{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*b44($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class u44{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var I44=30000,R44=1000,q44=65536,aQ,M44=($)=>{return"connection"in $},k44=($)=>{let Z=M44($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??I44,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??R44,maxChunkBytes:Z.maxChunkBytes??q44,diagnostics:Z.diagnostics}},T_$=($)=>{return Array.from($.entries())},S44=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},V44=($,Z,G)=>{if(S44(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return T_$(G.headers);return T_$(G.headers)},I_$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},C44=()=>{return crypto.randomUUID().replaceAll("-","")},_44=($)=>{try{$?.unsubscribe()}catch{}},f44=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},x44=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},IB=($,Z,G)=>{$.publish(Z,E_$(G))},v44=($)=>{return $.type.startsWith("response.")},W81=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},y44=($)=>{if($==="idle")return new aQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new aQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},R_$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(y44(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=L_$(W.value.data);if(!v44(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},g44=async($)=>{let Z=!1;while(!0){let G=await R_$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new aQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new aQ(G.value.code,G.value.message);throw new aQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},h44=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){IB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of b44(J,$.maxChunkBytes)){if(X)return;IB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:j_$(W)}),G++}}}catch(Q){if(X)return;IB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},c44=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await R_$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new aQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(P_$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new aQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){IB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},RB=($)=>{let Z=k44($);return f44(Z.maxChunkBytes),async(G,X)=>{let Y=vV$(G),Q=new Request(G,X),J=C44(),W=yV$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new aQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,_44(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new aQ("tunnel_aborted",W81(Q.signal));IB(Z.connection,W.abort,{type:"abort",requestId:J,reason:W81(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new aQ("tunnel_aborted",W81(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new aQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);IB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:V44(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};IB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)IB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?h44({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await g44({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(x44(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:I_$(P.headers)});return new Response(c44({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:I_$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var q_$=O(()=>{z_$();A_$();xL0();aQ=class aQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var uL0=O(()=>{q_$()});function M_$($){let Z=$.createFetch??d44,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return K81;let Q=CJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return K81;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return K81}}}var K81,d44=($,Z)=>RB({connection:$,firstFrameTimeoutMs:Z});var k_$=O(()=>{uL0();Jr();K81={online:!1,capabilities:[]}});async function*l44($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function S_$($){let Z=$.createFetch??((G)=>RB({connection:G,idleTimeoutMs:m44}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=CJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*l44(U)}}var m44=45000;var V_$=O(()=>{uL0();Jr()});import{z as fJ}from"zod";function C_$($){return JSON.stringify($)}var aZZ;var __$=O(()=>{aZZ=fJ.discriminatedUnion("type",[fJ.object({type:fJ.literal("cancel"),runId:fJ.string()}),fJ.object({type:fJ.literal("cancel_req"),reqId:fJ.string()}),fJ.object({type:fJ.literal("keep_alive")}),fJ.object({type:fJ.literal("shutdown")})])});function b_$($){let Z=$.createFetch??((G)=>RB({connection:G,idleTimeoutMs:i44}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function f_$($){let Z=$.createFetch??RB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:C_$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var i44=45000;var x_$=O(()=>{uL0();__$();Jr()});function dL0($,Z,G,X){if(!X)return!1;return $.emit(Z,b3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var v_$=O(()=>{R8()});class w81{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as n44,rm as lL0}from"fs/promises";import{join as mL0}from"path";async function iL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-p44),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await RC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await y_$($,Y,Z);else if(!Y.startsWith(".")){let Q=mL0($,Y),J=await RC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await y_$(Q,K,Z)}if((await RC(Q)).length===0)await lL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function y_$($,Z,G){let X=0,Y=mL0($,Z),Q=await RC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=mL0(Y,W),w=await RC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=mL0(K,F);await lL0(N,{recursive:!0,force:!0}),X++}}if((await RC(K)).length===0)await lL0(K,{recursive:!0,force:!0})}if((await RC(Y)).length===0)await lL0(Y,{recursive:!0,force:!0});return X}async function RC($){try{return(await n44($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var p44=30;var U81=()=>{};import{DBOS as F81,SchedulerMode as t44}from"@dbos-inc/dbos-sdk";async function o44(){let $=[$3(),MC(),qK()],Z=0;for(let G of $)try{Z+=await iL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function a44($,Z){await F81.runStep(()=>o44(),{name:"monitoringRetention"})}function h_$(){if(g_$)return;g_$=!0;let $=F81.registerWorkflow(a44,{name:"monitoringRetentionWorkflow"});F81.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:r44,mode:t44.ExactlyOncePerIntervalWhenActive})}var r44="23 4 * * *",g_$=!1;var c_$=O(()=>{iX();U81()});function u_$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await XN.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Ru0($.db,Z,X.role);return Y.boundAuth=Iu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new yD(G,void 0,Y.boundAuth,X.role,"self"),i40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var d_$=O(()=>{gD();ki()});function s44(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function $54(){for(let $ of e44)$()}function l_$($){let Z=[...H81.logs,$];H81={...H81,logs:Z.length>500?Z.slice(-500):Z},$54()}function N81(){return Z54}var H81,e44,Z54=!1;var B81=O(()=>{H81=s44(),e44=new Set});import{EventEmitter as G54}from"events";var O81;var m_$=O(()=>{B81();O81=new G54;O81.on("request",($)=>{l_$($)})});function i_$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=bg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>bg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${$5.tool}${N}${$5.dim}(${E})${$5.reset}`}else if(H.method)Q=`${$5.dim}${bg(H.method)}${$5.reset}`}}catch{}}let W=bg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${$5.mcp}${bg(U.slice(0,12))}\u2026${$5.reset}`}else if(Y==="/mcp")W=`${$5.mcp}/mcp${$5.reset}`;else if(Y==="/mcp/registry")W=`${$5.mcp}/mcp/registry${$5.reset}`;let K=Y54(X),w=J?"\u25C0":"\u2190";if(!N81())console.log(`${$5.dim}${w}${$5.reset} ${K}${X}${$5.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=X54(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!N81())console.log(`${$5.dim}${B}${$5.reset} ${K}${X}${$5.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${$5.reset} ${$5.duration}${N}${$5.reset}`);O81.emit("request",{method:X,path:bg(Y),status:F,duration:U,timestamp:new Date})}}}var $5,X54=($)=>{if($>=500)return $5.serverError;if($>=400)return $5.clientError;if($>=300)return $5.redirect;return $5.ok},Y54=($)=>{return $5[$]||$5.reset},bg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var n_$=O(()=>{B81();m_$();$5={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as o_$}from"crypto";import{mkdir as Q54,readdir as J54,rm as p_$,stat as a_$}from"fs/promises";import{join as E81,relative as W54}from"path";import{z as T$}from"zod";function e_$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return E81(K54,Z)}function $b$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function D81($,Z){let G=e_$($),X=$b$(Z);return E81(G,X)}function w54($,Z,G,X){let Y=O1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return o_$("sha256",Y).update(Q).digest("hex")}function r_$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=w54(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${$b$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function Zb$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${o_$("md5","etag").update(X).digest("hex")}"`}async function Gb$($,Z,G,X,Y){try{let Q=await J54($,{withFileTypes:!0});for(let J of Q){let W=E81($,J.name),w=W54(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await Gb$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await a_$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:Zb$(W,U.mtime,U.size)})}catch{}}}}catch{}}function Xb$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:T$.object({prefix:T$.string().optional(),maxKeys:T$.number().optional().default(1000),continuationToken:T$.string().optional(),delimiter:T$.string().optional()}),outputSchema:T$.object({objects:T$.array(T$.object({key:T$.string(),size:T$.number(),lastModified:T$.string(),etag:T$.string()})),nextContinuationToken:T$.string().optional(),isTruncated:T$.boolean(),commonPrefixes:T$.array(T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=e_$(X);await Q54(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await Gb$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({contentType:T$.string().optional(),contentLength:T$.number(),lastModified:T$.string(),etag:T$.string(),metadata:T$.record(T$.string(),T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=D81(X,Q.key),W=await a_$(J);return{contentType:U11(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:Zb$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??t_$;return{url:r_$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional(),contentType:T$.string().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??t_$;return{url:r_$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({success:T$.boolean(),key:T$.string()}),handler:async(Y)=>{let Q=Y,J=D81(X,Q.key);try{return await p_$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:T$.object({keys:T$.array(T$.string()).max(1000)}),outputSchema:T$.object({deleted:T$.array(T$.string()),errors:T$.array(T$.object({key:T$.string(),message:T$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=D81(X,K);try{await p_$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function L81($,Z,G){let X=Xb$(Z,G),Y=new Ow({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:z5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:T$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:T$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new yY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),eW(Y,Q,$,"mcp:dev-assets")}async function Yb$($,Z,G,X){let Q=Xb$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var K54="./data/assets",t_$=3600,s_$,Qb$;var Jb$=O(()=>{F8();wp();Y6();vu();Xy();jG();ZL0();s_$=new V1;s_$.all("/",async($)=>{let Z=$.get("studioContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return L81($.req.raw,Z,X)});Qb$=s_$});var Wb$={};X6(Wb$,{mountDevRoutes:()=>U54});function U54($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return L81(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await Yb$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",Qb$);let G=new V1;G.use("*",tQ({mountPath:"/api/dev-assets"})),G.route("/",$L0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var Kb$=O(()=>{Y6();X11();ZL0();Jb$()});var wb$=O(()=>{pu0();tu0();zE()});var nL0=O(()=>{wb$()});var Fb$={};X6(Fb$,{streamAgent:()=>Ub$,createDecopilotClient:()=>H54});async function F54($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (L6(),$m0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function Ub$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (L6(),$m0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await F54(F.body);return Q({stream:H})}function H54($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return Ub$(Y,X,W,Q,J)}}}import{z as dX}from"zod";function Hb$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=N54.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:dX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:dX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var N54,t7Z,B54=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},j81=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},pL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},O54=($,Z,G)=>{let X=pL0($,Z,G);return new Proxy(Yv.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},D54=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => Fb$);return J(X,Z.token,$,Y,Q)}}},z81=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>z81(G,Z));if(typeof $==="object"){if(B54($))return D54($,Z);if(j81($))return O54($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=z81(Y,Z);return G}return $},Nb$=($)=>{return z81($.state,$)};var fg=O(()=>{nL0();N54=new Map;t7Z=dX.object({id:dX.string(),title:dX.string(),capabilities:dX.object({vision:dX.boolean().optional(),text:dX.boolean().optional(),tools:dX.boolean().optional(),reasoning:dX.boolean().optional()}).passthrough().optional(),provider:dX.string().optional().nullable(),limits:dX.object({contextWindow:dX.number().optional(),maxOutputTokens:dX.number().optional()}).passthrough().optional()})});var E54,Bb$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},L54=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=Bb$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},Ob$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=Bb$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??E54;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},Db$=($,Z,G)=>{let X=new Headers($.headers);return L54(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var Eb$=O(()=>{E54=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function Lb$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function z54($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function zb$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function jb$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function Pb$($){return{handleProtectedResourceMetadata:(w)=>{let U=TK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=TK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=TK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=TK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=zb$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=TK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?jb$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=TK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??TK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=zb$(z),P=TK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=TK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof P81)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=jb$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!z54(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=Lb$(32),H=U.token_endpoint_auth_method!=="none"?Lb$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${TK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var P81,TK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var A81=O(()=>{P81=class P81 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as j54}from"async_hooks";var Ab$,Ur;var T81=O(()=>{Ab$=new j54,Ur={getStore:()=>{return Ab$.getStore()},run:($,Z,...G)=>Ab$.run($,Z,...G)}});var Ib$="SELF",rL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},Rb$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},Tb$="::",qb$=($)=>{let Z=$.indexOf(Tb$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+Tb$.length);return[G,X]},P54=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},Mb$=($)=>{if(rL0($))return[];return Object.keys($)},A54=($,Z)=>{if(rL0($))return $.events;let G=$[Z];if(!G)return[];if(Rb$(G))return G.events;return Object.keys(G)},tL0=($,Z,G)=>{if($===Ib$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!j81(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},T54=($,Z,G)=>{let X=Z;if(rL0($)){let Q=[];for(let J of $.events){let W=qb$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=tL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of Mb$($)){let J=tL0(Q,X,G);if(!J)continue;let W=A54($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},I54=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},R54=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},q54=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},M54=async($,Z,G,X,Y)=>{let Q=X;if(rL0($)){let U=new Set;for(let H of $.events){let N=qb$(H);if(!N)continue;let[B,D]=N,E=tL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of Mb$($)){let F=tL0(U,Q,Y);if(F)J.set(F,U)}let W=I54(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(Rb$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=R54(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return q54(w)},kb$;var I81=O(()=>{fg();kb$={subscriptions:T54,execute:M54,parseCron:P54}});function k54($,Z){let G=pL0("self",{meshUrl:$,token:Z});return Yv.forConnection(G)}function S54($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function Sb$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=k54($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(S54(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var R81=O(()=>{fg();nL0()});import{z as FZ}from"zod";function hU($){return{...$,execute:(Z)=>{let G=Fr(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var Fr=($)=>{let Z=Ur.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},Vb$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},V54=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?Hb$(FZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[hU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:FZ.object({state:Z??FZ.unknown(),scopes:FZ.array(FZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:FZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:FZ.object({baseUrl:FZ.string(),org:FZ.string(),subjectConnectionId:FZ.string(),token:FZ.string()}).optional()}),outputSchema:FZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=Vb$(J);await Y(J.runtimeContext.env,{createAgent:Sb$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[hU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:E50,outputSchema:L50,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=Vb$(J);return kb$.execute($.handlers,J.context.events,W,K,w)}})]:[],hU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:FZ.object({}),outputSchema:FZ.object({stateSchema:FZ.unknown(),scopes:FZ.array(FZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},Cb$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...V54({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:FZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=Fr(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:FZ.object({}).shape},async(E)=>{let L=Fr();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=Fr(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new Ow({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:z5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new yY;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=Ur.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=Fr();return j({context:B,runtimeContext:P},P)}}};var oL0=O(()=>{su0();jG();vu();Xy();fg();I81();T81();R81();I81();R81()});import{decodeJwt as _b$}from"jose";var C54=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},bb$=($)=>()=>{return{...$??{}}},_54=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=_b$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:bb$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=_b$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=bb$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=Nb$(W),C54({env:Q,server:Z,url:X}),Q},b54,fb$=($)=>{let Z=Cb$($),G=$.cors??b54,X=$.oauth,Y=X?Pb$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return Ob$(J,G??{});let w=_54({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await Ur.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return Db$(U,J,G??{});return U}}};var xb$=O(()=>{fg();Eb$();A81();A81();T81();oL0();oL0();fg();nL0();b54={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as q81}from"zod";function v54($,Z){let G=hU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:ty,outputSchema:ry,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=vb$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return vb$.set(w,F),F}}),X=hU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:HK,outputSchema:XC,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=hU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:HK,outputSchema:q81.object({versions:q81.array(XC.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=hU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:QE0,outputSchema:JE0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=hU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:q81.object({}),outputSchema:oy,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function yb$($){let Z=$.db,G=new Wx(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=v54(G,Q.id),W=fb$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var f54=3600000,x54=500,vb$;var gb$=O(()=>{xb$();oL0();ay0();Q9();vb$=_g({ttlMs:f54,maxSize:x54,updateRecencyOnGet:!0})});import{sql as y54}from"kysely";import{randomUUID as hb$}from"crypto";import{z as g54}from"zod";async function c54($){let Z=new Date().toISOString(),G=hb$(),X=G4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:hb$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await y54`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function u54($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function d54($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",YC).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):ub$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?cb$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:cb$,rateLimitWindow:h54,rateLimitMax:ub$}}async function l54($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function m54($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function db$($){let{db:Z,db:G}=$,X=new Kx(G),Y=new wx(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await u54(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await d54(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await l54(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=gP$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:g54.treeifyError(U.error)},400);let F=await m54(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await c54({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var cb$=!0,h54="hour",ub$=100;var lb$=O(()=>{q4();R8();ay();sy0();ey0();Q9()});var mb$={};X6(mb$,{createPublishRequestHandler:()=>db$,createPublicMCPHandler:()=>yb$});var ib$=O(()=>{gb$();lb$()});var qp0={};X6(qp0,{watchHandler:()=>ob$,getProxyDispatch:()=>t54,createApp:()=>X94});import{readFileSync as i54}from"fs";import{PrometheusSerializer as n54}from"@opentelemetry/exporter-prometheus";import{DBOS as xg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as s54,oAuthProtectedResourceMetadata as e54}from"better-auth/plugins";async function p54($){let Z=$.connect(),G;try{G=await Promise.race([Z,pb$(nb$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),pb$(nb$)]),G.release(),!0}catch{return G.release(!0),!1}}function pb$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function t54(){if(!M81)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return M81}async function r54($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${I_1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function o54($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function X94($={}){let Z=$.database??H6(),G=!1;Z9.stop().catch((g)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",g)});let X,Y,Q=new $81,J,W,K,w,U,F=null;if($.disableNats)J=Z81(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Up,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(g)=>{return(async()=>{let H0=g.getReader();try{while(!0){let{done:f0}=await H0.read();if(f0)break}}catch{}finally{H0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=tC$();let g=O1().natsCredsPath,H0;if(g)try{H0=i54(g,"utf8")}catch(e1){console.error(`[app] failed to read NATS_CREDS at ${g}; connecting anonymously`,e1)}F.init(O1().natsUrls,H0?{creds:H0}:void 0);let f0=Qg0()?new ox0({getJetStream:()=>F.getJetStream()}):null;f0?.init().catch(()=>{}),X=f0;let e0=new At0({getJetStream:()=>F.getJetStream()});e0.init().catch(()=>{}),Y=e0,J=Z81({getConnection:()=>F.getConnection()}),W=new G81({getConnection:()=>F.getConnection()}),K=new Q81({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=M_$({getConnection:()=>F.getConnection()}),U=b_$({getConnection:()=>F.getConnection()});let u0=f_$({getConnection:()=>F.getConnection()}),T1=W;W={start:(e1)=>T1.start(e1),broadcast:(e1)=>T1.broadcast(e1),publishControlFrame:(e1,z6)=>{u0.publishControlFrame(e1,z6).catch((J4)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",J4)})},stop:()=>T1.stop()},BI$(F),F.onReady(()=>{f0?.init().catch((e1)=>{console.error("[McpListCache] Deferred init failed:",e1)}),e0.init().catch((e1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",e1)}),J.start(),Li1(()=>F.getConnection()),K.init().catch((e1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",e1)})})}if(vg)await vg();ax0(X),Tt0(Y);let N={storage:new Ox(Z.db),sseHub:Z9},B=new Lm0(N),D=new $m(Z.db),E=new w81(D);E.start(),W.start((g)=>{b90(g),B.execute({type:"CANCEL",taskId:g}).catch((H0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",H0)})}).catch((g)=>{console.error("[Decopilot] CancelBroadcast start failed:",g)}),F?.onReady(()=>{W.start().catch((g)=>{console.error("[CancelBroadcast] Deferred start failed:",g)})}),K.init().catch((g)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",g)}),vg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),zi1(),Y.teardown(),ax0(null),Tt0(null)};let L=new V1;if(L.use("*",pb0({enabled:(g)=>yb(g,"debug")==="1"})),L.use("*",Oz0),L.use("/*",wb1({origin:(g)=>{if(g.includes("localhost")||g.includes("127.0.0.1"))return g;return g},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(g,H0)=>{if(await H0(),g.req.path.includes("/files/"))return;if(g.req.path.includes("/fs/")&&g.req.path.endsWith("/read"))return;g.header("X-Frame-Options","DENY"),g.header("Content-Security-Policy","frame-ancestors 'none'")}),!O1().noTui)L.use("*",i_$());L.use("*",async(g,H0)=>{if(await H0(),cg(g.req.path))return;if(g.res.status>=500){let e0=await g.res.clone().text();console.error(`[5xx Response] ${g.req.method} ${g.req.path} - ${g.res.status}:`,e0)}}),L.get(xZ.HEALTH,(g)=>{if(G)return g.json({status:"shutting_down"},503);return g.json({status:"ok"})}),L.get(xZ.HEALTH_LIVE,(g)=>{return g.json({status:"ok"})}),L.get(xZ.HEALTH_READY,async(g)=>{if(G)return g.json({status:"shutting_down"},503);let H0={};if(H0.postgres={status:await p54(Z.pool)?"up":"down"},F)H0.nats=F.isConnected()?{status:"up"}:{status:"down"};else H0.nats={status:"down"};let f0=H0.postgres.status==="up",e0=f0?200:503;return g.json({status:f0?"ready":"not_ready",services:H0},e0)}),L.get(xZ.METRICS,async(g)=>{try{let H0=await zz0.collect(),f0=a54.serialize(H0.resourceMetrics);return g.text(f0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(H0){return console.error("Failed to collect metrics:",H0),g.text("# Error collecting metrics",500)}}),L.get(`${xZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(g)=>{let H0=g.req.param("queueName");if(!$94.has(H0))return g.json({error:`Unknown queue: ${H0}`},404);let f0=await xg.listQueuedWorkflows({queueName:H0,status:"ENQUEUED"});return g.json({queue_length:f0.length})}),L.get(xZ.HOSTED_RUN_PENDING,(g)=>{let{active:H0,pending:f0,max:e0}=g4$();return g.json({pending:f0,active:H0,max:e0})}),L.route("/api/config",OC$),L.route("/api/_reports",MC$),L.route("/report",PC$($.clientDir)),L.route("/api/auth/custom",xI$),L.route("/api/auth/desktop",yI$),L.all("/api/auth/admin/*",uI$),L.all("/api/auth/*",async(g)=>{return await O8.handler(g.req.raw)});let z=aa1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",KC),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",KC),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Si),L.route("/",Zs1()),L.use("/oauth-proxy/:connectionId/*",KC),L.all("/oauth-proxy/:connectionId/*",tb$);let j=async(g)=>{let f0=await Z94()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",KC),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(g)=>{let f0=await G94()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=NI$({ttlMs:120000}),M=await ya1({db:Z.db,auth:O8,encryption:{key:O1().encryptionKey},observability:{tracer:uU,meter:E8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(g,H0)=>W.publishControlFrame(g,H0)});XN.set(M);let S=new Aw(O1().encryptionKey);D21({db:Z.db,baseUrl:P3()});let R=Y60(Z.db),V=new nl(Z.db),i=u_$({db:Z.db});Et0({storage:R,studioContextFactory:i}),_m0({studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:Z9},prepareLinkWorkFn:bq$,workPublisher:U}),Mm0({dispatchRunFn:Cq$,studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:Z9}});let f=new Ox(Z.db),v=new Zm(Z.db);P4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let g=F?.getConnection();return g?await rb$.jetstreamManager(g):null},messageParts:f.messageParts(),resolveRun:async(g)=>{let H0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",g).executeTakeFirst();return H0?{orgId:H0.organization_id,createdBy:H0.created_by,version:H0.message_storage_version??1,status:H0.status,runFenceToken:H0.run_fence_token,title:H0.title??null}:null},completeRunIfNotCompleted:async(g,H0)=>{let f0=await f.completeRunIfNotCompleted(g,H0);if(dL0(Z9,H0,g,f0),f0)await Im0(v,g,H0);return f0},markRunRequiresAction:async(g,H0)=>{let f0=await f.requiresActionIfInProgress(g,H0);return dL0(Z9,H0,g,f0),f0},markRunFailed:async(g,H0,f0,e0)=>{let u0=await f.markRunFailed(g,H0,f0,e0);if(dL0(Z9,H0,g,u0),u0)await Im0(v,g,H0);return u0},clearSynthesizedError:async(g,H0)=>{await f.messageParts().replaceMessageParts(g,jN(g,H0),[])},persistTitle:(g,H0,f0)=>f.update(g,H0,{title:f0}),onTitleUpdated:async({runId:g,orgId:H0,title:f0})=>{let e0=await f.get(g,H0).catch(()=>null);Z9.emit(H0,b3(g,e0?.status??"in_progress",{title:f0,virtualMcpId:e0?.virtual_mcp_id??void 0,createdBy:e0?.created_by,triggerId:e0?.trigger_id,branch:e0?.branch??null,createdAt:e0?.created_at,updatedAt:e0?.updated_at}))},bumpProgress:async({runId:g,orgId:H0})=>{await f.bumpProgress(g,H0)},recordCompleted:async({runId:g,orgId:H0,distinctId:f0,usage:e0})=>{i1.capture({distinctId:f0,event:"chat_message_completed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",input_tokens:e0.inputTokens,output_tokens:e0.outputTokens,total_tokens:e0.totalTokens}})},recordFailed:async({runId:g,orgId:H0,distinctId:f0,reason:e0,kind:u0})=>{i1.capture({distinctId:f0,event:"chat_message_failed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",error_category:u0,error_message:e0}})},purgeRun:async(g)=>{K.purge(g)}}),ZW$({studioContextFactory:i,systemDatabaseUrl:bx1(O1().databaseUrl,O1().databasePgSsl),streamBuffer:K}),h_$(),E21();let Z0=async(g,H0,f0)=>{let e0=await R.findById(g,H0);if(!e0)throw Error("Automation not found");return jt0({automationId:e0.id,organizationId:e0.organization_id,triggerId:null})},o=new Hg(R,({automation:g,trigger:H0,contextMessages:f0,idempotencyKey:e0})=>Kp({automationId:g.id,organizationId:g.organization_id,triggerId:H0.id,contextMessages:f0},{idempotencyKey:e0})),B0=[$3(),MC(),qK()];for(let g of B0)iL0(g).then(()=>{}).catch((H0)=>console.error("[monitoring] Retention cleanup failed:",H0));let D0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((g)=>console.error("[auth] Expired API key cleanup failed:",g));D0(),setInterval(D0,86400000).unref(),L.use("*",async(g,H0)=>{if(Nz0(g.req.path))return H0();let f0={measure:async(u0,T1)=>{wQ(g,u0);try{return await T1()}finally{WY(g,u0)}}},e0=await XN.create(g.req.raw,{timings:f0});e0.automationRunner=Z0,g.set("studioContext",e0);try{await H0()}finally{let u0=e0.pendingRevalidations;if(u0.length>0)Promise.race([Promise.allSettled(u0),D8(30000)]).catch((e1)=>console.error("[studio] revalidation cleanup error:",e1))}}),L.use("/api/:org/decopilot/*",wC),L.use("/api/:org/v1/*",wC),L.use("/api/:org/files/*",wC),L.use("*",async(g,H0)=>{let f0=g.req.path;if(f0.startsWith("/api/org-sso/")||f0.startsWith("/api/auth/")||f0.startsWith("/api/tools/management")||f0.startsWith("/oauth-proxy/")||f0.startsWith(`${G01}/`))return H0();let e0=g.get("studioContext");if(!e0?.organization?.id||!e0?.auth?.user?.id)return H0();if(!(await e0.storage.orgSsoConfig.getByOrgId(e0.organization.id))?.enforced)return H0();if(!await e0.storage.orgSsoSessions.isValid(e0.auth.user.id,e0.organization.id))return g.json({error:"SSO authentication required for this organization"},403);return H0()});let J0=new V1;J0.use("*",tQ({mountPath:"/api/org-sso"})),J0.route("/",PE0()),L.route("/api/org-sso",J0),L.get("/api/tools/management",(g)=>{return g.json({tools:rb0,grouped:rO()})}),L.use("/mcp/*",async(g,H0)=>{wQ(g,"mcp");try{return await H0()}finally{WY(g,"mcp")}});let G0=async(g,H0)=>{let f0=g.var.studioContext;if(!f0.auth.user?.id&&!f0.auth.apiKey?.id){let e0=new URL(g.req.url);return g.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${e0.origin}${e0.pathname}/.well-known/oauth-protected-resource"`}})}return await H0()};if(L.use("/mcp/:connectionId?",G0),L.use("/mcp/gateway/:virtualMcpId?",G0),L.use("/mcp/virtual-mcp/:virtualMcpId?",G0),L.use("/mcp/self",G0),f3()){let{mountDevRoutes:g}=(Kb$(),Gz0(Wb$));g(L,G0)}let a=new V1;a.use("*",tQ({mountPath:"/mcp"})),a.route("/",JB0()),L.route("/mcp",a);let A0=new V1;A0.use("*",tQ({mountPath:"/mcp/self"})),A0.route("/",VL0()),L.route("/mcp/self",A0);let w0=new V1;w0.use("*",tQ({mountPath:"/mcp"})),w0.route("/",wB0()),L.route("/mcp",w0),L.use("/api/:org/models/*",async(g,H0)=>{wQ(g,"llm_models");try{return await H0()}finally{WY(g,"llm_models")}});let v0=Z11({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",v0),F!=null)M81=S_$({getConnection:()=>F?.getConnection()??null});L.route("/api",sV$()),L.get("/api/links/me",async(g)=>{try{let H0=g.req.header("authorization")??"",f0=/^Bearer\s+(.+)$/i.exec(H0),e0=null;if(f0){let T1=(f0[1]??"").trim();e0=await LE0(T1,O8.api)}else e0=g.get("studioContext")?.auth?.user?.id??null;if(!e0)return g.json({error:"unauthorized"},401);let u0=w?await w(e0):{online:!1,capabilities:[]};if(!u0.online)return g.json(null);return g.json({hostname:u0.hostname,cliVersion:u0.cliVersion})}catch(H0){return console.error("[links/me] presence probe failed; reporting offline:",H0 instanceof Error?H0.message:String(H0)),g.json(null)}}),L.use("/api/:org/files/*",wC),L.route("/api",CC$);let d0=new V1;d0.use("*",tQ({mountPath:"/api"})),d0.route("/",CL0()),L.route("/api",d0),L.route("/api",UC$);let i0=new V1;i0.use("*",tQ({mountPath:"/api"})),i0.route("/",_L0({tokenStorage:V,automationEventDispatcher:o})),L.route("/api",i0);let n0=new tl(Z.db),U0=new V1;U0.use("*",tQ({mountPath:"/api"})),U0.route("/",aE0()),L.route("/api",U0),L.route("/api/deco-sites",ZM$()),L.route("/api/deco-apps",YC$());let C0=new V1;C0.use("*",tQ({mountPath:"/api/deco-sites"})),C0.route("/",eE0()),L.route("/api/deco-sites",C0);let T0=new V1;T0.use("*",tQ({mountPath:"/api/vm-events"})),T0.route("/",GC$()),L.route("/api/vm-events",T0);let{createPublishRequestHandler:N0,createPublicMCPHandler:Q0}=await Promise.resolve().then(() => (ib$(),mb$)),X0={db:Z.db,vault:{encrypt:(g)=>S.encrypt(g),decrypt:(g)=>S.decrypt(g)}},V0=N0(X0),n=Q0(X0);L.use("/org/:orgRef/registry/publish-request",KC),L.post("/org/:orgRef/registry/publish-request",V0),L.use("/org/:orgSlug/registry/*",KC),L.all("/org/:orgSlug/registry/*",n),L.post("/api/:org/registry/publish-request",V0),L.all("/api/:org/registry/*",n),L.route(G01,dI$());let e=fV$({kvStorage:n0,runRegistry:B,streamBuffer:K,sseHub:Z9,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:o,mountDevAssets:f3(),mcpAuth:G0,oauthProxyHandler:tb$,watchHandler:ob$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",e),L.notFound((g)=>{return g.json({error:"Not Found",path:g.req.path},404)}),L.onError(dq$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([Z9.stop(),vg?Promise.resolve(vg()).finally(()=>{vg=null}):Promise.resolve()]),F)await F.drain().catch((g)=>console.error("[shutdown] NATS drain error:",g));console.log("[shutdown] Flushing telemetry..."),await mY().catch((g)=>console.error("[shutdown] Telemetry flush error:",g)),console.log("[shutdown] Closing database..."),await xx1(Z).catch((g)=>console.error("[shutdown] Database close error:",g)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await xg.registerQueue(lY,{partitionQueue:!0,concurrency:Bt0,minPollingIntervalMs:Ot0}),await xg.registerQueue(eQ,{partitionQueue:!0,concurrency:Cm0}),await xg.registerQueue(RK,{partitionQueue:!0,concurrency:qm0}),await xg.registerQueue(cU,{partitionQueue:!0,concurrency:$W$}),await Q11(R),await Promise.allSettled(["automations-gate","automations-global"].map((g)=>xg.deleteQueue(g))),await Dt0(Z.pool),Wh1().catch((g)=>{console.error("[studio-pack-backfill] failed:",g)}),L21().catch((g)=>{console.error("[org-fs] public-sets boot sync kick failed:",g)})}})}var rb$,nb$=5000,M81=null,vg=null,tb$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("studioContext");if(!Y)Y=await XN.create($.req.raw),$.set("studioContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await sx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Vi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let R=N.searchParams.get("redirect_uri");if(R){let V=O1().baseUrl??B.origin;try{let i=new URL(R),f=new URL(V);if(!(i.origin===f.origin||i.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",R)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(R_1(J.connection_url))try{let V=await r54(Y,J.organization_id),i=o54(V);for(let[f,v]of i)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let o=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=o||null,P=B0||null}}catch{}let R=await $.req.formData();if(R.has("resource"))R.set("resource",J.connection_url);let V=R.get("client_id"),i=R.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof i==="string"&&i)P=i;let f=new URLSearchParams;for(let[v,Z0]of R.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let R=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),i={};try{i=V?JSON.parse(V):{}}catch{z=V}let f=typeof i==="object"&&i!==null&&!Array.isArray(i);if(z===void 0&&!f)z=V;if(z===void 0){let v=i,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...R?.slug?{organization_slug:R.slug}:{},...R?.name?{organization_name:R.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[R,V]of A.headers.entries())if(!S.includes(R.toLowerCase()))M.set(R,V);if(X==="token"&&A.ok){let R=await A.text();try{let V=JSON.parse(R);if(typeof V.access_token==="string"&&V.access_token){let i=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await ex(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:i,clientId:j,clientSecret:P,tokenEndpoint:f};await new b5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(R,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},ob$=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return rQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!Z9.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{Z9.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),Z9.remove(X,J),U()})})})},a54,$94,Z94=()=>e54(O8),G94=()=>s54(O8);var Mp0=O(()=>{l5();F8();z21();OG();fb();R8();Y6();Z$0();Ub1();tb0();CQ();ki();te0();HQ();B5();q4();Z01();gI$();lI$();J01();cq$();G11();QJ();n40();X11();lq$();Y11();xV$();eV$();XC$();w11();QC$();WB0();Ci();FC$();UB0();f$1();DC$();AC$();kC$();_C$();b$1();_$1();Ar();Bd();rC$();UY();A60();ol();Rt0();oC$();sC$();Y_$();k_$();V_$();x_$();zm0();v_$();Lg0();Cg0();sw();Tg0();c_$();o$0();U81();iX();J11();Iv();Tm0();Dm0();o$0();a01();dy0();ly0();d_$();gb();n_$();LC();te0();$y();f90();rb$=k(uB(),1);a54=new n54,$94=new Set([lY,eQ,RK,cU])});var $f$={};X6($f$,{resolveClientDir:()=>U94,resolveAssetPathWithTraversalCheck:()=>eb$,isPathWithinDirectory:()=>sb$,createAssetHandler:()=>F94});import{resolve as Hr,dirname as Y94,join as Q94,extname as J94,basename as W94,sep as ab$}from"path";function K94($,Z){if($===Z||W94($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${ab$}assets${ab$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function sb$($,Z){let G=Hr(Z),X=Hr($);return X===G||X.startsWith(G+"/")}function eb$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Hr(Z,G);if(!sb$(X,Z))return null;return X}function U94($,Z="../client"){let G=new URL($),X=Y94(G.pathname);return Hr(X,Z)}function F94($={}){let{env:Z="production",clientDir:G=w94,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=eb$({requestPath:W,clientDir:G});if(!K)return null;let w=Q94(K,"index.html"),U=Hr(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(J94(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:K94(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var w94="./dist/client";var Zf$=()=>{};var Gf$={};X6(Gf$,{tryUpgradePreviewWs:()=>L94,tryHandlePreviewHttp:()=>E94,previewWebSocketHandler:()=>z94,parsePreviewBaseDomain:()=>D94,isPreviewWsData:()=>aL0,extractHandleFromHost:()=>k81});function B94($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function O94(){return new Response(N94,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function D94($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function k81($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function E94($,Z){let G=k81($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return Br(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(jV)&&B94($))return O94();return Y.headers.delete(jV),Y}function Br($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function aL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function L94($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=k81($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return Br(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return Br(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return Br(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return Br(426,"upgrade failed");return}function Nr($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var H94=256,N94='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',z94;var Xf$=O(()=>{Ap0();z94={open($){let Z=$.data;if(!aL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),Nr($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{Nr($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{Nr($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!aL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=H94){Nr($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!aL0(Z))return;Nr($,Z,1000,"")}}});var Wf$={};X6(Wf$,{printBanner:()=>P94,bannerLines:()=>Jf$,BANNER_LINES:()=>Yf$,BANNER_GRADIENT:()=>Qf$});function j94($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function Jf$($){let Z=Yf$.map((G,X)=>{let[Y,Q,J]=j94(Qf$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function P94($){console.log("");for(let Z of Jf$($))console.log(Z);console.log("")}var Yf$,Qf$;var Kf$=O(()=>{Yf$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Qf$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var Uf$={};X6(Uf$,{bootstrapDevLinkSession:()=>V94});import{existsSync as A94}from"fs";import{chmod as T94,mkdir as I94,rename as R94,writeFile as q94}from"fs/promises";import{dirname as M94,join as wf$}from"path";function k94($){return wf$($,"dev-link")}function S94($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return wf$(k94($),"session.json")}async function V94($,Z){let G=S94($),X=H6().db,Y=gQ()?await Yp():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(A94(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await O8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await O8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await I94(M94(G),{recursive:!0});let W=`${G}.tmp`;return await q94(W,JSON.stringify(J,null,2),{mode:384}),await T94(W,384),await R94(W,G),{path:G,userSub:Y.id}}var Ff$=O(()=>{HQ();CQ();pN()});l5();var h81="4";function c81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:h81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}F8();Yz0();B5();function Rx$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function Tz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function P61(){let $=Rx$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:Tz0($,"--cpu-prof-dir")??process.cwd(),name:Tz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(Tz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}qz0();var Rr;function V61(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=kB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Rr=setInterval(()=>void Z().catch(()=>{}),$),Rr.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Rr)clearInterval(Rr)}}import*as kx$ from"bun:jsc";var{startSamplingProfiler:Sx$,samplingProfilerStackTraces:Vx$}=kx$;function C61(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{Sx$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=Vx$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function _61(){P61();let $=[V61(),S61(),C61()];return()=>{for(let Z of $)Z()}}import{existsSync as g94}from"fs";var lX=O1();z61();var{DBOS:Or,DBOSClient:C94}=await import("@dbos-inc/dbos-sdk");function Df$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var _94=[lY,eQ,RK,cU],b94=lX.dispatchRole==="worker"?_94:lX.dispatchRole==="api"?[]:void 0;Or.setConfig(c81({systemDatabaseUrl:Df$(lX.databaseUrl,lX.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:lX.podName,listenQueues:b94}));var{createApp:f94}=await Promise.resolve().then(() => (Mp0(),qp0)),{isServerPath:x94}=await Promise.resolve().then(() => (Ar(),G61)),{createAssetHandler:v94,resolveClientDir:Ef$}=await Promise.resolve().then(() => (Zf$(),$f$)),y94=lX.port,Hf$=Ef$(import.meta.url,"../client"),Lf$=g94(Hf$)?Hf$:Ef$(import.meta.url,"../dist/client"),h94=v94({clientDir:Lf$,isServerPath:x94}),c94={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function u94($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(c94))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:d94,tryHandlePreviewHttp:l94,tryUpgradePreviewWs:m94,previewWebSocketHandler:S81,isPreviewWsData:V81}=await Promise.resolve().then(() => (Xf$(),Gf$)),{getOrInitSharedRunner:i94}=await Promise.resolve().then(() => (on(),J3$)),zf$=d94(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),Nf$={baseDomain:zf$??"",getRunner:i94},sL0=await f94({clientDir:Lf$}),C81=process.env.DBOS_CONDUCTOR_KEY?.trim(),Bf$=process.env.DBOS_CONDUCTOR_URL?.trim();await Or.launch({...C81?{conductorKey:C81}:{},...C81&&Bf$?{conductorURL:Bf$}:{}});console.log(`[dbos] application version: ${Or.applicationVersion}`);var _81=5,b81=0;await sQ(async()=>{b81++;try{return await sL0.initDbos()}catch($){let Z=b81>=_81?"giving up":"retrying";throw console.warn(`[dbos] initDbos attempt ${b81}/${_81} failed, ${Z}`,$),$}},{maxAttempts:_81,minTimeout:1000,maxTimeout:1e4,jitter:0.5});if(!lX.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (Kf$(),Wf$));console.log("");for(let Z of $())console.log(Z)}var n94=Bun.serve({idleTimeout:0,port:y94,hostname:"0.0.0.0",fetch:async($,Z)=>{if(zf$){let X=await m94($,Z,Nf$);if(X===void 0)return;if(X)return X;let Y=await l94($,Nf$);if(Y)return Y}let G=await h94($);if(G)return u94(G);return sL0.fetch($,{server:Z})},websocket:{open($){if(V81($.data))S81.open($)},message($,Z){if(V81($.data))S81.message($,Z)},close($){if(V81($.data))S81.close($)}},development:!1}),p94=_61();if(lX.localMode)Promise.resolve().then(() => (pN(),cN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (Ff$(),Uf$)),Y=lX.baseUrl??`http://localhost:${lX.port}`,Q=await X(lX.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (pN(),cN0));Z()}catch{}});var Of$=!1;async function t94($){let Z;try{Z=await C94.create({systemDatabaseUrl:Df$(lX.databaseUrl,lX.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:eQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:eQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function eL0($){if(Of$)return;Of$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{p94(),sL0.markShuttingDown();let Q=d81(lX.dispatchRole,G,process.env.SHUTDOWN_DRAIN_MS);await D8(Q),await n94.stop(!0);let J=Or.executorID;await Or.shutdown(),await t94(J),await sL0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>eL0("SIGTERM"));process.on("SIGINT",()=>eL0("SIGINT"));process.on("SIGHUP",()=>eL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),eL0("uncaughtException")});